Data Privacy Analyst

The Role

Our Privacy Team is dedicated to helping Vanguard protect personal information and uphold the trust placed in us by our clients, crew, and regulators. We provide expert guidance on privacy and data protection, helping the business navigate evolving regulatory requirements while enabling the responsible use of data.

Working closely with colleagues across business, technology, legal, compliance, and risk teams, you will embed privacy into the design of products, services, processes, and emerging technologies. We are a collaborative and inclusive team that values diverse perspectives, practical problem-solving, and continuous learning. Joining our team offers the opportunity to make a meaningful impact by helping shape privacy practices across a global organisation. You'll contribute to protecting individuals' rights, influencing how data is used responsibly, and supporting innovation in a way that aligns with Vanguard's commitment to doing the right thing for our clients and crew.

In this role you will

Provide expert advice on privacy and data protection requirements, including UK GDPR, EU GDPR, ePrivacy requirements, AI-related privacy obligations, and other applicable regulations.

Serve as a trusted advisor to stakeholders, embedding Privacy by Design principles into new products, technologies, processes, and strategic initiatives

Lead privacy-related forums and trainings to increase awareness around the privacy program as well as to ensure adherence to data privacy laws and regulations.

Oversee daily incident assignments, investigations and response activities to ensure adherence to applicable regulatory and notification requirements.

Review business initiatives, projects, and technology implementations to identify privacy risks and compliance obligations.

Privacy Risk Management

Conduct and review Privacy Risk Assessments (PRAs), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and other privacy risk assessments.

Identify privacy risks and recommend proportionate mitigation strategies.

Monitor and track remediation activities for privacy-related findings and control gaps.

Support the maintenance of privacy risk registers and issue management activities.

Provide privacy guidance when onboarding third-party services and vendor engagements

Privacy by Design

Embed Privacy by Design and Default principles in business processes, products, systems, and AI solutions.

Partner with technology, cybersecurity, legal, compliance, and risk teams throughout project lifecycles.

Review data flows, retention practices, consent mechanisms, and transparency requirements.

Provide guidance on data minimisation, purpose limitation, and lawful processing.

What it takes

Experience in privacy, data protection, compliance, risk, legal, governance, or a related field.

A strong understanding of privacy principles and data protection requirements.

The ability to assess risks, solve problems, and provide clear, practical advice.

Strong communication and stakeholder management skills, with the confidence to work across different teams and levels of the organisation.

A collaborative mindset and a willingness to learn from and support others.

Sound judgement and the ability to balance regulatory requirements with business objectives.

An interest in emerging technologies, data-driven innovation, and the evolving privacy landscape.

Most importantly, we're looking for people who are committed to protecting individuals' privacy, building trusted relationships, and contributing to an inclusive team where diverse perspectives and experiences are valued.

Qualifications

Privacy related experience, compliance or regulatory experience in the financial services industry preferred.

Bachelor's degree in Law, Information Management, Business, Risk Management, or related discipline.

Significant experience in privacy, data protection, compliance, risk, legal, or governance functions.

Strong knowledge of UK GDPR, EU GDPR, and related privacy regulations.

Preferred Qualifications

CIPP/E, CIPM, CIPT, or equivalent privacy certification.

Experience supporting AI governance or emerging technology assessments.

Knowledge of privacy requirements across multiple jurisdictions.

Experience with privacy management platforms and governance tool

Special Factors

Vanguard is not offering visa sponsorship for this position

• This is a hybrid position and would require you to work in the office 3 days per week (Tuesday, Wednesday & Thursday)
• Please note that we review applications on a rolling basis and may close this role early if there is a high level of interest. To avoid missing out, we recommend applying as soon as possible

Why Vanguard?

Vanguard is a different kind of investment company. It was founded in the United States in 1975 on a simple but revolutionary idea: that an investment company should manage its funds solely in the interests of its clients.

This is a philosophy that has helped millions of people around the world to achieve their goals with low-cost, uncomplicated investments.

It's what we stand for: value to investors.

Inclusion Statement

Vanguards continued commitment to diversity and inclusion is firmly rooted in our culture. Every decision we make to best serve our clients, crew (internally employees are referred to as crew), and communities is guided by one simple statement: Do the right thing.

We believe that a critical aspect of doing the right thing requires building diverse, inclusive, and highly effective teams of individuals who are as unique as the clients they serve. We empower our crew to contribute their distinct strengths to achieving Vanguards core purpose through our values.

When all crew members feel valued and included, our ability to collaborate and innovate is amplified, and we are united in delivering on Vanguard's core purpose: to take a stand for all investors, to treat them fairly, and to give them the best chance for investment success.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.