Associate Data Privacy Analyst

Job Title: Associate Data Privacy Analyst

Department: Governance

Reports To: Data Privacy Analyst

Job Summary: Sage Publishing is seeking an Associate Data Privacy Analyst to support compliance with the EU and UK GDPR and other applicable privacy laws. The role will help maintain privacy policies, procedures and records, support data protection activities and provide practical advice to teams across the business.

Key Responsibilities:

Compliance Support: Support the development and maintenance of data protection policies, procedures and controls.

Risk Assessment: Identify privacy risks and recommend practical actions to reduce them. Assessments: Support DPIAs, including assessing necessity, proportionality and risks to individuals.

Individual Rights Requests: Support requests including access, correction, erasure, restriction, objection and portability, within legal deadlines.

Data Audits: Assist with privacy audits across the organization.

Incident Management: Support the investigation, documentation and escalation of personal data breaches.

Vendor Assurance: Review supplier security and privacy information and support checks on processor terms and safeguards.

Liaison: Act as a point of contact for routine privacy enquiries and escalate complex or high-risk matters.

Documentation: Maintain privacy records, including Records of Processing Activities, DPIAs and decision logs.

Reporting: Prepare clear updates on privacy risks, requests, incidents and compliance actions.

Qualifications:

Education: Bachelor's degree in Law, Information Technology, Business Administration or a related field, or equivalent experience.

Experience: At least one/two years of experience in data protection, privacy, compliance or a related area.

Knowledge: Good understanding of GDPR principles, individual rights, accountability, data breaches, processors and international transfers.

Skills: Strong analytical, organisational and communication skills, with the ability to manage several tasks independently.

Certifications: A recognised data protection or privacy qualification is preferred.

Necessary Skill Sets:

DPIAs: Ability to identify privacy risks, assess necessity and proportionality, and document mitigation actions.

Data Subject Rights Requests: Experience handling requests, from locating personal data to communicating clearly with individuals and internal teams.

Records and Accountability: Ability to maintain accurate RoPA entries, assessment records and evidence of compliance.

Incident Investigation and Response: Ability to support prompt investigation, risk assessment, escalation and remediation of personal data incidents.

Legal Knowledge: Understanding of UK and EU GDPR requirements

Personal Attributes:

• Integrity: Handles personal data and sensitive information responsibly.

• Attention to Detail: Produces accurate and complete records.

• Proactive: Identifies issues early and follows actions through.

• Collaborative: Works effectively with teams and stakeholders across the business.