Privacy Protection Analyst

The Privacy Protection Analyst will contribute to the success of Cigna International Health's global privacy program by driving efficient, process-driven privacy operations within the Privacy Center of Excellence (COE).

This role is central to delivering consistent, scalable, and high-volume operational support, ensuring strong execution across key privacy processes. The Data Protection Analyst will operate within a clearly defined framework, with a strong focus on quality and discipline, while partnering with senior privacy experts through effective escalation of complex or high-risk matters.

Key Responsibilities:

• Process Data Subject Rights (DSAR) requests using standard templates and workflows.
• Manage privacy requests intake, ticketing, and tracking tools.
• Maintain and update privacy registers, logs, and trackers.
• Support the processing of data breaches (administrative coordination).
• Ensure accurate documentation of cases and closure records.
• Maintain reviews' schedule.

Vendor & Contract Support (Non-Advisory):

• Complete privacy questionnaires (first-pass review).
• Support due diligence documentation collection and tracking.
• Process standard contract intake and coordinate routing to Legal/Privacy experts.
• Support template-based contractual privacy clauses population (non-negotiation).

Policy / Framework Operational Support:

• Support maintenance of: Records of Processing Activities (ROPA), Privacy policies and procedures (updates coordination).
• Assist in framework implementation tracking and documentation.
• Support audit readiness through document organization and evidence collection.

Consent, Cookies & Compliance Operations:

• Support cookie and consent management updates.
• Maintain records of consent implementation status.
• Assist with compliance tracking dashboards and reporting.

Reporting & Administrative Support:

• Prepare standard privacy dashboards and reports.
• Maintain metrics on DSARs, vendor reviews, and operational KPIs.
• Support inbox management (shared privacy mailboxes).
• Perform general administrative work (e.g., invoice follow-up, documentation).

Escalation & Governance Discipline:

• Identify and escalate: High-risk requests, Regulatory issues, Complex legal questions.
• Ensure strict adherence to defined escalation protocols and SOPs.

Profile & Requirements:

• Law degree with broader European, Middle East or Asian legal knowledge.
• 5+ years of experience in: Privacy operations, compliance operations, or legal operations.
• Experience working with: Ticketing systems and workflow tools, High-volume, process-driven environments.
• Strong attention to detail and accuracy.
• Ability to follow standard operating procedures (SOPs) rigorously.
• Strong organizational and reporting skills.
• Experience with data protection concepts (GDPR awareness).
• Experience with: DSAR processing, Vendor due diligence processes.
• Certification (e.g., CIPP) is a plus but not required.
• Fluent in English, with capability in a second language preferred but not required.
• Team Player.