Privacy jobs

Working in privacy

Privacy teams are small, so most roles are broad. An analyst may run impact assessments in the morning and review a vendor contract in the afternoon. Employers tend to hire for judgement and clear writing first, then for knowledge of a particular sector.

People arrive from law, information security, engineering, audit and customer operations. A legal background is common but not required; many of the roles listed here are operational and suit people who like building processes that other teams will actually follow.

What employers usually ask for

• Working knowledge of UK GDPR and the Data Protection Act 2018
• Experience running data protection impact assessments
• Evidence of advising non-specialist colleagues in plain language
• A recognised certificate such as CIPP/E or CIPM is often listed as desirable rather than essential