Numan

About the Company

Numan is on a mission to make people healthier. We provide healthcare as people need it, and treat common health conditions with personalised plans that alleviate symptoms and fix root causes. We offer integrated care - including diagnostics, medication & supplements, 1-1 clinical care, and digital programs - in one digital platform, to help patients take control of their health.

Listed Jobs

Company Name

Numan

Job Title

Data Protection Analyst

Job Description

**Job Title:** Data Protection Analyst **Role Summary:** Responsible for ensuring organizational compliance with UK GDPR, Data Protection Act 2018, PECR, and related legislation. Acts as the primary privacy advisor, develops policies, conducts audits, manages data breach response, and promotes a culture of data protection across all business units. **Expectations:** - Maintain continuous compliance with UK data protection regulations. - Provide expert guidance on privacy matters to all departments. - Lead privacy risk assessments and manage data subject requests within statutory deadlines. - Communicate effectively with regulators and external stakeholders. - Deliver training and embed “privacy by design” principles in products and processes. **Key Responsibilities:** - Develop, implement, and update data protection policies and procedures. - Conduct regular compliance audits and Data Protection Impact Assessments (DPIAs). - Manage Data Subject Access Requests (DSARs) and ensure timely responses. - Investigate, report, and remediate data breaches, including ICO notifications. - Maintain the Record of Processing Activities (RoPA) and retention schedules. - Design and deliver privacy training for staff at all levels. - Collaborate with Clinical, Product, IT, Security, Legal, and People teams to embed privacy controls. - Represent the organization in regulator discussions and external privacy forums. **Required Skills:** - In‑depth knowledge of UK GDPR, DPA 2018, PECR, and DUAA. - Strong analytical and problem‑solving abilities; translate legal requirements into practical actions. - Excellent communication and stakeholder‑influence skills. - Ability to work autonomously, prioritize multiple tasks, and meet deadlines. - High integrity and discretion handling sensitive data. - Experience with privacy management tools (e.g., OneTrust) – preferred. - Familiarity with international privacy frameworks (EU GDPR, CCPA) – a plus. **Required Education & Certifications:** - Bachelor’s degree in Law, Information Security, Computer Science, or a related field. - Recognized data protection certification (e.g., CIPP/E, CIPM) preferred. - Proven experience in a dedicated data protection role within the UK, preferably in digital healthcare.

London, United kingdom

Hybrid

03-10-2025