Privacy Analyst II

Help us use technology to make a big green dent in the universe! Kraken powers some of the most innovative global developments in energy. We create the technology that redefines utilities and unlocks a new energy system of the future. By optimising renewable generation, building a more intelligent grid, and empowering utilities to deliver an exceptional customer experience, our operating system is transforming the industry worldwide. It’s an incredibly exciting time to work in energy. Join us on our mission to improve the lives of ONE BILLION humans within the decade and shape a cleaner, better future for everyone. 🚀 What you’ll own Handle support requests from the business, providing data protection advice. Collaborate with product, engineering, legal and security teams to ensure our products meet data protection regulations, best practices and client requirements. Engage with our developers to advocate for privacy by design and default; embed privacy requirements into engineering workflows and the SDLC. Conduct and support DPIAs and PIAs for products and processing activities, including risk mitigation and risk register management. Supporting client delivery teams in answering data protection processing/handling queries, RFPs and audits. Third-party vendor due diligence, working with InfoSec, Legal, and Procurement to assess vendor posture and manage subprocessor obligations. Lead on data privacy incident response, including logging, investigation, root cause analysis, remediation, and regulatory and client reporting. Develop and deliver training and knowledge content on global data protection. Create and maintain data protection policies and procedures, automating workflows where possible - including through scripting and tooling, for efficient, scalable operations. Maintaining record of processing activities for our controller and processor obligations, including data mapping across Kraken and our subsidiaries. Managing the privacy mailbox, including handling rights requests. 🧠 What you’ll bring to the party Proven experience in the following: Core requirement: Data incident management, incl. root cause analysis, remediation, logging and reporting. Significant operational experience in DPIAs/PIAs, third party vendor management, and risk management. Creating and maintaining records of processing activities. Working closely with technical/engineering teams, including software development and information security. Working knowledge of the GDPR and UK DPA 2018 and staying current with the evolving data protection landscape. Working in a Privacy Analyst role within an organisation that’s a data processor (e.g. a SaaS provider or software vendor). Implementing Privacy by Design and Privacy by Default into product development. Strong stakeholder management; confident engaging regularly with the business to support early and efficient risk analysis including over calls. Strong written and verbal communication - ability to translate complex regulatory requirements into clear, actionable guidance for technical and non-technical audiences alike. A self-starter, taking the initiative to help drive the team’s initiatives forward. Highly adaptable to new technologies, processes, and changing priorities. Strong problem-solving and analytical capabilities. Very well organised; attention to detail and documentation, and being able to meet deadlines under pressure. ⭐️ Bonus points Experience automating privacy processes or workflows; scripting experience or working with APIs/MCPs to automate processes. Candidates with a privacy engineering background, or those looking to move into privacy engineering, are encouraged to apply. Familiarity with privacy-enhancing technologies including data masking, pseudonymisation, anonymisation, and encryption at rest and in transit. Experience with data discovery and classification tooling, and the ability to map data flows technically as well as through process-based exercises. Familiarity with the SDL…