Privacy Assurance & Compliance Specialist
E
EverwayPrivacy compliance
Remote- UKFull-TimeJunior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 2+ years experience in a similar role in data privacy compliance or privacy assurance role
- Required Skills
- Google Workspace
Requirements
- Degree-level (or equivalent) qualification in a related discipline such as Law, Data Protection, Information Security, Compliance, or Risk.
- At least 2 years of experience in a similar data privacy compliance or privacy assurance role.
- Sound working knowledge of EU GDPR, including risk and compliance management.
- Practical experience supporting DPIAs, DSARs or data deletion requests, ROPAs, incident response, and vendor privacy reviews.
- Experience translating regulatory requirements into practical business processes and controls.
- Ability to work independently and manage and prioritize workstreams in a dynamic environment.
- Experience in a SaaS, Edtech, or software development environment is desirable.
- Knowledge of ISO 27001, ISO 27701, ISAE 3000, ISO 42001, or SOC 2 frameworks is desirable.
- Familiarity with GRC platforms such as Vanta or One Trust is desirable.
- Relevant privacy or audit qualifications such as CIPP/E, CIPM, or ISO internal auditor training are desirable.
- Proficiency with Google Workspace, including Docs, Chat, and Drive, is desirable.
Responsibilities
- Support the Director of Compliance in implementing the privacy workstream of the compliance roadmap.
- Lead workstreams and improvement initiatives such as data mapping, risk management, controls testing, and policy development.
- Coordinate Data Protection Impact Assessments (DPIAs), track risk treatments, and embed Privacy-by-Design.
- Manage processes for Data Subject Access Requests (DSARs) and data deletion requests with system owners.
- Identify privacy risks and controls, translate them into business processes, and support incident management.
- Handle privacy-focused vendor security inquiries and collaborate with Legal on related requests.
- Maintain the Knowledge Base and Trust Centre compliance resources.
- Conduct internal Vendor Security Reviews to assess and mitigate third-party privacy risks.
- Develop and maintain privacy policies, notices, procedures, and governance reporting including KPIs.
- Support audit and certification activities, maintain evidence in GRC tools, monitor regulatory developments, and assist with regulator and auditor interactions.
View Full Description & ApplyYou'll be redirected to the employer's site
