{"id":3527139,"url":"https://alion.io/job/enstar-group-data-privacy-specialist-us","title":"Data Privacy Specialist US","company":{"id":2122590,"name":"Enstar Group","domain":"enstargroup.com","url":"https://alion.io/company/enstargroup","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Data Science","role_family":"Data Science","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":130000,"max":145000,"currency":"USD","period":"year","gross":null,"usd_annual":145000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"EU AI Act","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-30T11:38:59Z","employer_posted_date":null,"last_verified_at":"2026-10-30T11:38:59Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"About you and the Role:The Data Privacy Specialist will sit in Enstar's Global Data Privacy team reporting to the Data Privacy Manager and working alongside colleagues in the UK and US. You will be providing day-to-day specialist data privacy advice across the Group so that personal data is handled lawfully, consistently and demonstrably in every jurisdiction in which Enstar operates. The role holder is expected to work across all disciplines of data privacy rather than specialising in specific areas and will coordinate with colleagues in other time zones.\nEnstar’s business is built on acquired portfolios, therefore the role involves working with inherited records, legacy systems, long retention tails and processing designed under a previous owner and exercising judgement about what to prioritise within those constraints.\nWhat you will be doing:Overall contributionProvide day-to-day specialist data privacy advice across the Group so that personal data is handled lawfully, consistently and demonstrably in every jurisdiction in which Enstar operates and deliver assigned workstreams of the data privacy maturity programme.\nScope and reporting\nWork in a Group-wide, multi-jurisdictional role within Enstar's Global Data Privacy team, reporting to the Data Privacy Manager and coordinating with colleagues in the UK, US and other time zones.\n\nWork across all disciplines of data privacy rather than specialising in specific areas.\n\nJudgement and escalation\nExercise independent specialist judgement: analyse complex, multi-jurisdictional issues and recommend proportionate solutions, including what to prioritise when working with inherited records, legacy systems, long retention tails and processing designed under a previous owner.\n\nEscalate appropriately to the Data Privacy Manager. Legal conclusions and the acceptance of business risk remain with the Head of Data Privacy, the DPO and the relevant business owners.\n\nMaturity programmeContribute to the baseline assessment across entities and jurisdictions and own delivery of assigned workstreams through to evidenced closure.\nPrivacy by Design and DefaultAdvise project teams on applying Privacy by Design and Default principles, supporting the initiative to embed them across the organisation and delivering the relevant training.\nPIAs, DPIAs and LIAs\nProduce privacy impact assessments (PIAs), data protection impact assessments (DPIAs) and legitimate interests assessments (LIAs), including those escalated following screening by the Analyst.\n\nSubmit completed assessments to the Data Privacy Manager for quality review, with decisions on residual risk taken by the DPO, Head of Data Privacy or business owner as applicable.\n\nConsumer and data subject rightsAdvise on data subject rights requests across all jurisdictions and handle complex or multi-jurisdictional cases, including those referred by the Analyst, ensuring each is recorded end to end.\nROPA, inventories and data mapsMaintain and update the record of processing activities (ROPA), supporting the Data Privacy Manager.\nRegulatory compliance and horizon scanning\nSupport the Data Privacy Manager in maintaining compliance with applicable data protection legislation across all operating jurisdictions (UK GDPR, EU GDPR, US privacy laws and the Australian Privacy Act).\n\nMonitor regulatory developments as part of the Horizon Scanning Framework.\n\nRegulatory registrations and filingsAssist with regulatory registrations and filings.\nPrivacy notices, cookies and consentReview and update privacy notices and cookie consent management.\nSupplier privacy due diligenceAssist with privacy due diligence on third-party suppliers as part of the Supplier Engagement Framework.\nData Processing AgreementsReview Data Processing Agreements (DPAs) with relevant data processors and recommend changes.\nInternational transfers and TIAs/TRAs\nAssist with international data transfer mechanisms across all operating jurisdictions, ensuring they are current, properly documented and subject to regular review.\n\nProduce transfer impact or risk assessments (TIAs/TRAs) where required, develop recommendations for the Data Privacy Manager's review, and maintain oversight of cross-border data flows arising from third-party arrangements.\n\nPrivacy incidents and breaches\nAssist with the handling of personal data incidents from identification to resolution.\n\nWhere required, support the DPO in the assessment and management of notifiable breaches across jurisdictions, and liaise with Information Security to align incident management processes.\n\nBreach response testingAssist with testing of the Data Breach Response Plan.\nPrivacy advice and business engagementProvide day-to-day specialist advice across the Group, translating complex requirements into practical guidance that a non-specialist can follow.\nTraining and awarenessDesign and deliver data privacy training for employees and contractors at all levels, monitor completion rates and champion privacy awareness across the business.\nPrivacy Champions ProgrammeCoordinate the deployment, day-to-day support and development of the Data Privacy Champions network.\nPrivacy risk register and mitigation\nAssist with the maintenance and development of the data privacy risk register within the Group's ERM framework across all jurisdictions.\n\nIdentify and assess privacy risks, develop recommendations and proportionate mitigation plans and controls, deliver assigned mitigation actions, and track and report on progress, collaborating with the relevant business functions.\n\nPolicies and proceduresAssist with the review of data protection policies and procedures across all jurisdictions.\nManagement information and reportingPrepare management information and reporting on the status of the privacy programme for the Data Privacy Manager and relevant stakeholders.\nWhat you will bring:Essential Qualifications and Experience\nA minimum of four to six years of substantive, hands-on data privacy experience, ideally gained within a regulated financial services, insurance, or professional services environment.\n\nRelevant professional qualifications: CIPP/E, CIPM or equivalent.\n\nDemonstrable expertise in UK GDPR and the Data Protection Act 2018, with solid working knowledge of EU GDPR and at least one of: US privacy law (GLBA, CCPA/CPRA, state privacy laws), or Australian privacy law (Privacy Act 1988, APPs, NDB scheme).\n\nDemonstrable breadth across all disciplines of data privacy, rather than deep specialism in one or two areas\n\nPractical experience of data subject rights at volume, including DSARs in a regulated sector context.\n\nProven experience of conducting DPIAs and providing Privacy by Design advice to business stakeholders.\n\nExperience of negotiating and reviewing Data Processing Agreements and international data transfer mechanisms.\n\nDemonstrable experience of managing personal data breaches and advising on regulatory notification obligations.\n\nAbility to plan and deliver assigned workstreams to time, and to report progress\n\nAbility to work productively and visibly in a remote setting across time zones\n\nClear written English, including policies and guidance that a non-specialist can follow\n\nDesirable Qualifications and Experience\nExperience in the insurance or reinsurance sector, with familiarity with insurance-specific data processing activities (claims, underwriting, fraud prevention databases, actuarial processing).\n\nFurther certification such as CIPM, CIPT or Fellow of Information Privacy, or a relevant legal qualification\n\nKnowledge of the NAIC Insurance Data Security Model Law and state insurance commissioner notification requirements.\n\nFamiliarity with the California Insurance Information and Privacy Protection Act (IIPPA) and its 2023 amendments.\n\nExperience of working within a multi-jurisdictional privacy programme spanning EEA, UK, US and/or Australian operations simultaneously.\n\nExperience of privacy due diligence and integration on mergers, acquisitions or portfolio transfers\n\nFamiliarity with ISO 27701, ISO 27001, SOC 2 or NIST, and with working alongside an information security team.\n\nHands-on use of privacy management tooling, for example OneTrust or TrustArc, including consent management platforms.\n\nTechnical literacy sufficient to read a data flow or architecture diagram and understand what deletion means across databases, logs, archives and backups.\n\nInterest in artificial intelligence governance and the emerging obligations under the EU AI Act.\n\nLegal qualification (solicitor, barrister or overseas equivalent) or privacy law academic background.\n\nYour Benefits:\nEnstar offers best-in-class Medical, Dental, and Vision healthcare for single and family coverage.\n\nBoard-certified doctors and pediatricians are available virtually 24/7 for urgent care.\n\nAccess to Health Savings Account (HSA) or Flexible Spending Account (FSA).\n\nAccess to Dependent Care FSA to cover daycare expenses.\n\nAccess to Employee Assistance Programs (EAP) for health and well-being.\n\nOptional Pet & Home/Auto Insurance.\n\nWellness Reimbursement program (up to $600 annual reimbursement for wellness-related expenses, i.e., gym memberships, massage, etc.).\n\n401K retirement plan (company matches up to 6% of employee contribution).\n\nOne paid annual volunteer day.\n\nGeneral Info The target base salary pay range for this role is $130,000-$145,000 \n*Target full-time equivalent base salary range is based on relevant market data. The actual salary offered will depend on applicable market data for the hiring location and the relevant candidate's knowledge, skills/experience. This salary range is not inclusive of applicable discretionary incentives.\n\nWho we are:\nWe are a trusted global re/insurance group and the leading provider of retrospective solutions, with specialist underwriting capabilities. We help our clients manage risk, unlock capital and create the financial freedom to grow.With operations across the world’s major insurance hubs and a global network of close to 800 talented professionals, we bring expertise and fresh thinking to some of the industry’s biggest challenges.\n\nFor more information about Enstar, visit our website: .\n\nFor more information about careers at Enstar, visit our LinkedIn Life page or visit our careers site\n\nWhy Enstar:\nLearning and development are a fundamental part of every employee's career journey with Enstar. Supporting growth and career progression is key to how we engage our people - helping them to learn, grow and succeed at Enstar. \n\nWe offer a range of initiatives and resources to support our people throughout their careers:\n\nProfessional Qualifications and Study Support: We support employees who wish to take professional qualifications aligned to their role and career development. \n\nTraining, Conferences & Seminars: As a global organisation, we work with many professional bodies to provide access to training programmes, conferences, seminars and continuing professional development (CPD) opportunities.\n\nDigital Learning Hub: Our digital learning hub, LinkedIn Learning, offers a wide range of self-serve resources, including courses, videos, eBooks, and audio books, to help employees build news skills and deepen their knowledge.\n\nWe also invest in physical, mental and financial wellbeing initiatives for our employees. Supportive teams, inspiring work and a positive working environment all contribute to our collective wellbeing. Beyond the workplace, we strive to make a positive influence in our communities and to continuously reduce our impact on the environment.\n\nEnstar Inclusivity Policy:\nWe’re an equal opportunity employer and believe that our inclusive environment creates an authentic working culture. We don’t discriminate on the basis of age, physical or mental disability, gender reassignment, marriage and civil partnership, pregnancy and carer status, race (including colour, nationality, and ethnic or national origin), religion or belief, sex and sexual orientation. Enstar is committed in providing...","description_format":"text","description_chars":12320,"description_truncated":true,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Gym membership","Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Reinsurance"],"lifecycle":[{"event":"open","at":"2026-10-30T14:28:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":34,"reasons":["seen:3","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":145000,"is_top_pay":true},"html_url":"https://alion.io/job/enstar-group-data-privacy-specialist-us","json_url":"https://alion.io/job/enstar-group-data-privacy-specialist-us.json","meta":{"generated_at":"2026-11-03T17:24:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24291,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2122590},"rest":"https://alion.io/mcp/rest/get_company?id=2122590"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fenstar-group-data-privacy-specialist-us"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fenstar-group-data-privacy-specialist-us"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fenstar-group-data-privacy-specialist-us"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/enstar-group-data-privacy-specialist-us\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fenstar-group-data-privacy-specialist-us"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3527139}},{"tool":"search_jobs","arguments":{"company":"enstargroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3527139},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}