Overview

Data Privacy Analyst role in Hogan Lovells' Global Privacy Office. Location options: London or Birmingham. Reporting to: Senior Manager, Data Protection Compliance and DPO. Working hours: 35 hours per week (9:30am to 5:30pm) with potential for additional hours. We support agile and flexible working patterns; hybrid working may allow up to 40% of time from home and 60% in the office (discuss with recruitment).

Responsibilities

• Maintain dashboard analytics that track KPI and KRIs via Smartsheets and OneTrust.


• Conduct comprehensive reviews of data protection policies, procedures, and processes, and recommend improvements.


• Identify potential vulnerabilities and risks in data handling practices; track remediation and mitigation.


• Conduct data protection impact assessments for high-risk processing activities and monitor remediation actions.


• Maintain and update the firm’s records of processing activities and related documentation.


• Assist with client audits and third-party vendor risk reviews from a privacy perspective.


• Provide guidance and training to staff on data protection best practices and compliance requirements.


• Collaborate with stakeholders to implement corrective actions and enhance data protection across the firm.


• Manage special projects assigned by the Chief Privacy Officer, including dashboard analytics and KPI/KRI tracking.

Specific duties or responsibilities may be reviewed from time to time to reflect changes in personnel and management structure, staff location or services.

All members of the firm participate in our Responsible Business program.

Qualifications and Training

• At least five years’ experience in data privacy, data risk, data management, AI, data analytics, and data protection fields, with openness to candidates transitioning from other relevant sectors.


• Proven experience in data protection, with strong knowledge of GDPR, EU AI Act, HIPAA, and CCPA.


• Data Analytics.


• Previous work experience at matrixed law firms, banks, insurance companies, or accounting firms is desirable.


• Experience with requirements gathering, analysis, and recommendations development.


• Experience in reviewing policies and technical requirements from the user perspective, with a pragmatic approach to improving privacy by design.


• Familiarity with industry standards and frameworks related to data protection and privacy, including AI-specific considerations (e.g., NIST, ISO, Fed Ramp).


• Experience in effectively communicating with both technical and non-technical roles.


• Experience with OneTrust, Smartsheets, and ServiceNow is preferred.


• Preference for individuals holding IAPP certifications (CIPP-E, CIPP-US, AI-G, or CIPT).


• Bachelor’s degree in legal studies, computer science, information technology, executive education, corporate communications, or related field.


• Experience in consulting and risk management preferred.

General Attributes

• Demonstrated project management planning and ability to break down complex problems into manageable goals.


• Extremely organized and detail oriented.


• Excellent interpersonal skills, with the ability to build strong relationships with peers and executives.


• Outstanding oral and written communication skills.

Agile Working Statement

Our goal is to embed flexibility across our business by giving everyone the opportunity to work in an agile way, whether as a regular pattern or on an ad hoc basis, and we will be happy to discuss this further.

Equal Opportunities Employment Statement

It is the policy of Hogan Lovells to provide equal opportunities for all employees in relation to recruitment, training and promotion. Decisions in these areas will be made only by reference to the requirements of the job and shall not be influenced by any consideration of race or ethnic origin, religion, sex or gender identity, age, sexual orientation, marital and civil partnership status, pregnancy or disability.

All vacancies are open to direct applicants. Recruitment agencies: we have a preferred supplier list in place for all roles.

Seniority level

• Not Applicable

Employment type

• Full-time

Job function

• Engineering and Information Technology

Industries

• Law Practice, Legal Services, and Business Consulting and Services