Data Protection Analyst

The primary goal of this role is to bolster Family Bank's data protection framework. The analyst will provide essential technical, operational, administrative, and research support, aiming to build internal expertise in compliance, risk mitigation, and audit readiness. A key aspect of the role involves ensuring that all technical safeguards, access controls, and data governance protocols are in strict alignment with the Data Protection Act, 2019, and the bank's established internal security standards.

1. Support the implementation and ongoing maintenance of the Bank’s Data Protection & Privacy Framework.
2. Assist in keeping accurate records of processing activities (ROPAs) across all departments.
3. Contribute to the documentation, review, and updating of data protection policies, procedures, and standards.
4. Help business units integrate privacy by design and privacy by default principles into their processes and systems.
5. Maintain registers related to personal data processing activities and data inventories.
6. Aid in the deployment, configuration, and upkeep of technical data protection solutions like Data Loss Prevention (DLP).
7. Support the monitoring of data access controls, privilege management, and authentication safeguards.
8. Collaborate with IT and vendors to manage DLP technologies and other privacy-related security tools.
9. Assist in identifying and reporting any potential weaknesses in data protection controls.
10. Support the implementation of technical safeguards to protect personal and sensitive data.
11. Help conduct Data Protection Impact Assessments (DPIAs) for new systems, products, and operational changes.
12. Support data mapping exercises and the documentation of data flows.
13. Assist in identifying privacy risks and documenting corresponding mitigation controls.
14. Maintain registers of DPIAs, high-risk processing activities, and remediation actions.
15. Support privacy risk assessments for various projects and third-party engagements.
16. Aid in administering data subject rights requests, including access, rectification, erasure, and restriction.
17. Assist in tracking and coordinating responses to data subject access requests (DSARs).
18. Support the investigation and documentation of personal data breaches and privacy incidents.
19. Help maintain records of personal data breaches and incident responses.
20. Support the escalation of incidents to the Senior Data Protection Officer when necessary.
21. Contribute to the delivery of data protection awareness initiatives and staff training programs.
22. Assist in preparing internal privacy communications, newsletters, and guidance materials.
23. Research emerging privacy regulations, regulatory guidance, and global data protection trends.
24. Support awareness campaigns promoting the responsible handling of personal data.
25. Provide operational support to business units regarding data protection queries.
26. Support the monitoring of compliance with privacy policies, consent requirements, and data retention schedules.
27. Assist in preparing reports and dashboards on the Bank’s data protection posture.
28. Support internal audits, regulatory reviews, and compliance assessments.
29. Help conduct vendor privacy assessments and monitor third-party data protection obligations.
30. Track the remediation of identified privacy risks and control gaps.

1. Bachelor’s degree in Information Technology, Computer Science, Information Security, Network Security, Business Information Systems, or a related field.
2. Certification or training in Data Protection or Privacy (e.g., CIPM, CIPT, ISO Privacy modules).
3. Information security certifications such as CISSP, CISM, Network+, CCNP, or equivalent are advantageous.
4. Minimum of 2–4 years of experience in data protection, information security, IT risk, compliance, or data governance roles.
5. Proven experience supporting Data Loss Prevention (DLP) or similar information security technologies.
6. Experience supporting information security compliance and data governance processes.
7. Exposure to banking systems, digital banking platforms, or regulated financial services environments is an advantage.
8. Experience supporting audits, compliance assessments, or risk reviews.
9. Strong understanding of Data Protection & Privacy Governance.
10. Proficiency in Privacy Risk Assessment & DPIAs.
11. Knowledge of Data-Breach & Incident Management.
12. Familiarity with Digital Banking & Data-Driven Technology Risk.
13. Understanding of Third-Party & Cross-Border Data Risk.
14. Expertise in Information Security & Privacy Controls.
15. Competence in Data Governance & Records Management.