Privacy Analyst

Help us use technology to make a big green dent in the universe!

Kraken powers some of the most innovative global developments in energy.

We’re a technology company focused on creating a smart, sustainable energy system. From optimising renewable generation, creating a more intelligent grid and enabling utilities to provide excellent customer experiences, our operating system for energy is transforming the industry around the world in a way that benefits everyone.

It’s a really exciting time in energy. Help us make a real impact on shaping a better, more sustainable future.

Kraken Customer

What we do:

build the most AI-driven, innovative, forward-thinking platform for energy management. From optimising resources to delivering cost-effective, exceptional customer experiences through advanced Customer Information Systems (CIS), billing, meter data management, CRM, and AI-driven communications, Kraken is powering the next wave of innovation in the energy industry.

Why we do it: future energy will not look like energy as we know it today. We need to not just think about our future, but build for it. Now.

We’re looking for a Privacy Analyst to join our Privacy team, to bolster our privacy framework to accommodate our fast moving agile organisation, and help us navigate complex privacy landscapes globally as we expand into new territories.

• Handle support requests from the business, providing data protection and privacy expertise.
• Collaborate with product, engineering, and legal teams to ensure our services meet data privacy and protection regulations and best practices. Work closely with the Security team to align security measures with data protection goals.
• Engage with the internal developer community to advocate for the importance of data privacy and protection in software development, helping to embed privacy by design and privacy by default.
• Supporting the business with, and ensuring the completion of, DPIAs and PIAs for products and third party vendors, working to mitigate and reduce risks; risk register management.
• Third party vendor due diligence; working closely with the Info Sec, Legal and Procurement teams to assess the posture of vendors and mitigate risks before the business onboards. Subprocessor analysis and client notification support.
• Support the Cyber Defense team on data privacy incidents, including logging, investigation, remediation, root cause analysis and reporting.
• Support in the development and delivery of training programs for Kraken employees, on global privacy and data protection.
• Helping to create and modify data protection handling policies and procedures that meet global compliance regulations and internal standards.
• Maintaining record of processing activities for our controller and processor obligations; data mapping exercises with Kraken and our Group’s subsidiaries.
• Managing the privacy mailbox, which can include handling GDPR requests.
• Regularly update key stakeholders about the state of data privacy and protection on our platform, emerging risks, and strategies being taken to mitigate them.
• Creating and refining privacy team procedures, automating where possible, for efficient, scalable operations that allow us to meet the demand of the business.

• Working in a Privacy Analyst role within an organisation that’s a data processor (e.g. a SaaS provider or software vendor).
• Creating and maintaining records of processing activities, in line with controller and processor obligations.
• Significant operational experience in DPIAs/PIAs, third party vendor management, and risk management.
• Data incident management, incl. root cause analysis, remediation, logging and reporting.
• Working closely with technical teams, including software development and information security.
• Knowledge management (including content creation, maintenance and delivery).
• Working knowledge of the majority of Articles of the EU GDPR, UK DPA 2018, and CIPPA.
• Implementing Privacy by Design and Privacy by Default into product development.
• Staying up-to-date with the fast-moving landscape of data protection regulations and technologies, including international legislation that will impact our global…