Data Privacy and Retention Analyst (12 Month FTC)

Job Title: Data Privacy and Retention Analyst

Location: London/Hybrid (Typically 2/3 days in the office)

Type: Full time - 12 Months Fixed Term (If you are a job share partnership, work reduced hours, or any other way of working flexibly, please do still get in touch)

At Ardonagh Specialty, we provide much more than just a workplace. We are dedicated to fostering skill development and knowledge within a team that is passionate about their work, values their Employees, and truly celebrates diversity.

Working at Ardonagh Specialty means you’ll be part of The Ardonagh Group. We are proud of our innovative environment offering many opportunities for growth across the wider group. Employees regularly move between our united teams, and we encourage you to make your role your own.

Our offices are lively and exciting places to be, but we understand that life needs flexibility, and offer a genuinely flexible approach to working. If you are looking to join a thriving, energetic business with exciting plans, this role could be an ideal fit for you.

What we can offer:

We offer much more than just an inclusive culture with apprenticeships, study support, participation in our annual Spotlight Awards, Community Trust, Sports Teams, office socials, events and so much more. All of this with a supportive management team as well as working alongside some of the industry’s top talent.

You’ll have access to wellbeing programs, fantastic discounts across many big-name businesses including supermarkets, gym memberships, restaurants, and healthcare cash plans etc.

Further perks of working with us (Fixed benefits):

• Employer pension contribution of 10% (providing you, the Employee provides 5%).

• Good work life balance - flexibility to suit you.

• Competitive salary.

• Life Assurance at X4 of your base salary.

• Group Income Protection.

• Generous Annual Leave entitlement.

• Private Medical Insurance.

• Group annual bonus scheme.

Purpose of the Role:

To provide analytical and operational support across data protection, privacy governance, records management, and data retention activities. The role supports the organisation in meeting its legal, regulatory, and contractual obligations by maintaining effective privacy controls, retention frameworks, information governance processes, and regular compliance monitoring.

Working within the controls defined by the Ardonagh Specialty Data Protection Policy, Records Management Framework, Data Retention Standards, and relevant regulatory requirements, the role is responsible for analysing privacy and information governance risks, supporting compliance activities, maintaining records of processing, coordinating retention and disposal initiatives, and producing management information to demonstrate compliance.

The assignment will extend to focus to the continuous improvement of privacy and information governance practices, helping to ensure that personal data is managed lawfully, securely, transparently, and retained only for as long as necessary in accordance with UK GDPR, Data Protection Act requirements, FCA expectations, and internal policies.

Key Role Accountabilities:

· Support the delivery and ongoing operation of Ardonagh Specialty's data protection, records management, and data retention frameworks.

· Monitor compliance with data protection and retention requirements, identifying areas of risk and supporting remediation activities.

· Coordinate periodic reviews of retention schedules with business owners to ensure retention periods remain accurate, justified, and aligned to legal, regulatory, and business requirements.

· Manage the retention schedule update process, maintaining records of approved changes and ensuring updates are communicated and implemented across relevant systems and processes.

· Oversee disposition review activities, ensuring records identified for deletion or archival are reviewed, approved, and processed in accordance with retention standards and governance requirements.

· Assist with the investigation, documentation, and management of privacy incidents, near misses, and data subject rights requests where required.

· Maintain privacy and information governance documentation, including Records of Processing Activities (ROPAs), data inventories, retention schedules, and supporting compliance records.

· Support with the completion and administration of Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), Transfer Risk Assessments (TRAs), and other privacy assessments.

· Monitor and track privacy and information governance actions, risks, and remediation activities, escalating issues where appropriate.

· Provide operational support and guidance to business stakeholders on data protection, records management, and retention requirements.

· Work closely with the DPO, Digital, Risk & Compliance, Legal, and business stakeholders to embed privacy-by-design and effective information governance practices across the organisation.

Qualifications & Experience:

· Experience in providing advice on all matters relating to data protection, with proven experience working in data protection, ideally spanning data retention, records management, records of processing activities, and incident management

· Strong understanding of UK GDPR, Data Protection Act requirements, and core data protection principles.

· Experience using data privacy tooling, specifically OneTrust

· Understanding of records management and data retention principles, including retention schedules, records disposal, and defensible deletion practices.

· Experience coordinating activities across multiple stakeholders and tracking actions through to completion.

· Ability to interpret policies, standards, and regulatory requirements and apply them to operational processes.

· Experience in regulated environments (financial services, insurance, or similar) is beneficial.

· Familiarity with responsible AI principles.

Person Specification:

The role requires a detail-oriented and proactive individual who has is comfortable working across multiple concurrent workstreams spanning data privacy and protection, data retention and records management, coordinating with a range of stakeholders and maintaining accurate records and documentation to support compliance. They must bring strong attention to detail, intellectual curiosity, and the ability to interpret policies, standards, and regulatory requirements, and apply them to operational processes and produce business‑focused insights. The ideal candidate is structured, well‑organised, and capable of operating with limited oversight while engaging confidently with stakeholders across Digital, Risk & Compliance, the DPO, and business functions. They will be methodical in their approach, committed to accuracy and quality, and capable of managing routine operational activities with limited supervision. A collaborative mindset, willingness to learn, and a continuous improvement focus are essential, alongside a commitment to ensuring personal data and business information are managed responsibly, securely, and in accordance with legal, regulatory, and organisational requirements.

Think you don’t meet every requirement?

We are an equal opportunities Employer, dedicated to creating a diverse, inclusive, and authentic workplace where everyone can thrive, bring their whole self to work, and reach their full potential. If you’re excited about this role, but your experience doesn’t perfectly match what we are looking for, please apply anyway. You might just be the right fit for the job, or other opportunities we may have within the wider Group.

Interview Process:
At Ardonagh Specialty, we have a straightforward interview process to ensure the best fit for both you and the company:

• Submit your application with your CV, emphasising your skills and experience related to the job.

• Our Talent Acquisition team will then arrange a call where they can tell you more about the role and the team. We want to learn about your motivation and goals, what you can bring to Ardonagh Specialty, and answer any immediate questions.

• If successful, you will generally be invited to engage in a 1-hour interview with the Hiring Manager and selected team members, via teams or in person. We will discuss our technologies, key skills, and team dynamics and provide further opportunity to ask any questions. This is your chance to voice your thoughts on the role and we will outline our expectations and ensure this role aligns with your ambitions for the future.

• Depending on the role, you may be invited to attend a second stage interview with further members of the team.

If successful or unsuccessful, we always try and move quickly in presenting an offer or providing feedback.

#AS

If your application is successful, we will conduct relevant employment checks prior to you commencing employment with us. These will include verifying your recent employment, address, credit history, and a standard criminal record check.

Note to recruiters and employment agencies:

We will not pay for unsolicited CV's from recruiters and employment agencies unless we have a signed agreement and have requested assistance, in writing, for a specific vacancy.