Data Protection & Third‑Party Risk Analyst

Data Protection & Third‑Party Risk Analyst
12‑month FTC | Hybrid | Birmingham - £45k - £55k

We’re recruiting a Data Protection–focused analyst to support PII usage, data sharing, and third‑party risk across a large, multi‑site organisation.

This is not a SOC or cyber tooling role, it's focussed on how personal data is shared, used, minimised, and governed across SaaS platforms, IT vendors, and service providers.

What you’ll be doing

Assess how PII is shared with SaaS providers and IT vendors
Review and document data flows, purposes of processing, and data lifecycles
Conduct third‑party data protection risk assessments and DPIA‑style reviews
Maintain records of:
Data categories
Processing purposes
Hosting locations
Sub‑processors
Retention and deletion
Challenge unnecessary data collection and enforce data minimisation
Track and close remediation actions with vendors and internal teams
Support Procurement, Legal, IT, and the business with practical GDPR advice
Maintain clear, audit‑ready documentation for GDPR and third‑party assurance

What we’re looking for

3+ years in Data Protection, Privacy, or Third‑Party Risk
Strong, hands‑on experience with:
Understanding PII usage
Vendor / SaaS data sharing
GDPR in practice (not theory)
Comfortable challenging stakeholders on data usage
Experience working with IT vendors, platforms, or outsourced services
Able to balance risk, commercial reality, and compliance

Data Protection and Data Privacy-first role | Vendor & SaaS focused

If this could be suitable, please apply in the first instance