Data Privacy Analyst (12 month FTC)

Hello, we’re Starling. We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We’re a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. We’re a bank, but better: fairer, easier to use and designed to demystify money for everyone. Starling Bank is powered by Engine, the banking platform we built ourselves and which we are now rolling out to other banks around the world. We employ more than 3,500 people across our London, Southampton, Cardiff and Manchester offices.

To support our ongoing growth we’re looking to recruit a Privacy Analyst who will be responsible for promoting and assisting the DPO with data protection compliance across the Bank. You will support and report directly into the Data Protection Officer (DPO) and will have significant exposure across the Bank. The role represents a fantastic opportunity to join a vibrant institution and to shape the Bank’s attitude and approach to data protection.

This role is a 12 month fixed term contract.

Responsibilities:

• Technical Compliance & Oversight: You will be working with senior team members on/or the subject matter expert for technology-driven privacy issues. This involves all of the matters within the GDPR including Article 28 and Article 32 GDPR compliance, vendor due diligence, managing Article 30 ROPA, and advising the Business areas on data privacy by design & default and the Digital & Tech teams on complex areas like cookies, data retention, and automated processing.
• Strategic Risk Management: You will support the DPO and senior team members by leading DPIAs (Data Protection Impact Assessments) and assisting with or managing personal data breaches. This includes calculating risk severity and recommending corrective actions to prevent future incidents.
• Assurance & Reporting: Close and continuous review of the matters brought to team’s attention through various channels and deep dives with advice and operational know-how delivered with a pragmatic business focussed lens while at the same time ensuring processes and actions are in line with the law, guidance and practice. You will conduct deep dives of the matters that relate to data protection review patterns and gaps in compliance consultation with the DPO, following up known issues, monitor internal controls, contribute to Committee level papers, produce Management Information (MI) to track the Bank’s compliance health.
• Collaborative Advisory: You will act as a proactive consultant for the business in whichever area or project you are engaged with in an advisory, DPIA or assurance activity, including Cybersecurity, Vendor Management, and HR. Your goal is to embed "Privacy by Design" across the business through training, awareness campaigns, and direct project advice. Where relevant or necessary you liaise and engage closely with more senior colleagues in the DP team.
• Horizon Scanning: You contribute to Starling staying ahead of the curve, monitoring the regulatory landscape for changes in UK GDPR/DPA 2018 to ensure the Bank remains compliant as laws evolve.

Requirements

• A recognised Privacy qualification is preferred (e.g. CIPP, CIPM etc.) or a legal background, e.g. a law degree.
• Working towards a CIPP qualification or equivalent will be considered for in-house talent.
• Around 2-4 years relevant experience.
• Knowledge of data protection laws and regulations,with the ability to express complex ideas or legislation in easily understandable ways is preferred but not essential
• Ability to read and digest data protection legislation and summarise key points
• Ability to analyse privacy problems and communicate solutions to a wide range of audiences
• Excellent communication skills and writing skills. Experience with spreadsheets would be an advantage, as would the ability to produce accurate and timely management information and dashboards

Benefits

• 25 days holiday (plus take your public holiday allowance whenever works best for you)
• An extra day’s holiday for your birthday
• Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
• 16 hours paid volunteering time a year
• Salary sacrifice, company enhanced pension scheme
• Life insurance at 4x your salary
• Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
• Generous family-friendly policies
• Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
• Access to initiatives like Cycle to Work and Salary Sacrificed Gym partnerships

About Us

You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway.

We’re on a mission to radically reshape banking - and that starts with our brilliant team. Whatever came before, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.

Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.

By submitting your application, you agree that Starling Bank may collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we may process, where we may process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.