dunnhumby

Privacy Risk & Assurance Analyst

Posted 11 Days Ago

Be an Early Applicant

Gurgaon, Gurugram, Haryana, IND

In-Office

Junior

eCommerce • Retail

The Role

Perform second-line assurance of privacy and security requests, validate controls and evidence, manage and track privacy risks and remediation, review DSPM outputs against ROPA, maintain assurance documentation, and support control improvements and data exposure remediation with product, data, and security teams.

Summary Generated by Built In

dunnhumby is the global leader in Customer Data Science, partnering with the world’s most ambitious retailers and brands to put the customer at the heart of every decision. We combine deep insight, advanced technology, and close collaboration to help our clients grow, innovate, and deliver measurable value for their customers.

dunnhumby employs nearly 2,500 experts in offices throughout Europe, Asia, Africa, and the Americas working for transformative, iconic brands such as Tesco, Coca-Cola, Nestlé, Unilever and Metro.

Most companies try to meet expectations, dunnhumby exists to defy them. Using big data, deep expertise and AI-driven platforms to decode the 21st century human experience – then redefine it in meaningful and surprising ways that put customers first. Across digital, mobile and retail. For brands like Tesco, Coca-Cola, Procter & Gamble and PepsiCo.

We’re looking for a talented Privacy Risk & Assurance Analyst who expects more from their career. It’s a chance to work with our clients to implement our data platforms and software products. It’s an opportunity to work with a market-leading business to explore new opportunities for us and influence global retailers.

In this role, you support the data risk model by assuring, maintaining, and improving the quality of privacy and data‑risk information across our securiti* tooling and processes. You perform second‑line assurance, manage issues and risks through their lifecycle, and resolve privacy‑relevant DSPM issues to strengthen controls, reduce exposure, and improve our compliance posture. Your focus is assurance, risk management, data quality, and precision in applying privacy requirements.

Qualifications:

2+ years of experience in privacy, data protection, risk, compliance, information security, or data governance.
Practical exposure to structured reviews or checks of operational inputs, for example: Reviewing request forms, assessments, or registers for completeness and accuracy.
Validating evidence against stated requirements or controls.
Experience working with systems or tools that hold risk, privacy, or compliance data, with an understanding that:
Ability to follow defined assurance steps or test scripts, document findings clearly, and escalate issues where evidence is missing or weak.
Some exposure to issue or action tracking, such as logging findings, updating status, or following up with owners under guidance.
Strong attention to detail and a demonstrable habit of checking, questioning, and correcting inaccuracies.
Clear written communication skills, suitable for maintaining logs, notes, and audit‑ready records.
Willingness and ability to learn complex tooling and processes, and to apply feedback consistently

Key Responsibilities:

Conduct assurance reviews of privacy and security requests (CRAs, VRAs, controller requests), validating routing, inputs, controls, and risk mitigation.
Identify control gaps and failing controls, support remediation, and maintain assurance evidence and documentation.
Support end‑to‑end request flows, data hygiene, and accurate ROPA and backend records within the Securiti platform, including legacy remediation.
Track and manage issues arising from assurance, RACM testing, incidents, DSPM findings, and horizon scanning through to closure.
Identify recurring risk themes and contribute to playbooks, control updates, and process improvements.
Review DSPM outputs to validate sensitive data locations, classifications, and data flows, ensuring alignment with ROPA and Securiti records.
Support remediation of privacy‑relevant data exposure risks in collaboration with product, data, and information security teams.

What you can expect from us

We won’t just meet your expectations. We’ll defy them. So you’ll enjoy the comprehensive rewards package you’d expect from a leading technology company. But also, a degree of personal flexibility you might not expect. Plus, thoughtful perks, like flexible working hours and your birthday off.

You’ll also benefit from an investment in cutting-edge technology that reflects our global ambition. But with a nimble, small-business feel that gives you the freedom to play, experiment and learn.

And we don’t just talk about diversity and inclusion. We live it every day – with thriving networks including dh Gender Equality Network, dh Proud, dh Family, dh One, dh Enabled and dh Thrive as the living proof. We want everyone to have the opportunity to shine and perform at your best throughout our recruitment process. Please let us know how we can make this process work best for you.

Our approach to Flexible Working

At dunnhumby, we value and respect difference and are committed to building an inclusive culture by creating an environment where you can balance a successful career with your commitments and interests outside of work.

We believe that you will do your best at work if you have a work / life balance. Some roles lend themselves to flexible options more than others, so if this is important to you please raise this with your recruiter, as we are open to discussing agile working opportunities during the hiring process.

For further information about how we collect and use your personal information please see our Privacy Notice which can be found (here)

Skills Required

2+ years of experience in privacy, data protection, risk, compliance, information security, or data governance.
Practical exposure to structured reviews or checks of operational inputs (reviewing request forms, assessments, or registers for completeness and accuracy).
Validating evidence against stated requirements or controls.
Experience working with systems or tools that hold risk, privacy, or compliance data.
Ability to follow defined assurance steps or test scripts, document findings clearly, and escalate issues.
Some exposure to issue or action tracking (logging findings, updating status, following up with owners).
Strong attention to detail with a habit of checking, questioning, and correcting inaccuracies.
Clear written communication skills for maintaining logs, notes, and audit-ready records.
Willingness and ability to learn complex tooling and processes, and apply feedback consistently.

dunnhumby Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about dunnhumby and has not been reviewed or approved by dunnhumby.

Fair & Transparent Compensation — Pay is considered competitive relative to similar-sized firms in several markets. Positive perceptions of the overall pay-and-benefits mix support the view that compensation is broadly fair.
Leave & Time Off Breadth — Paid time off is described as generous, with multi‑week starting allowances plus extras like a paid birthday, loyalty‑based additional days, and periodic early Friday finishes. These features contribute to a favorable time‑off experience across several U.S. locations.
Healthcare Strength — Core coverage includes employer‑verified medical, dental, vision, life, and disability insurance alongside HSA/FSA options. This breadth of coverage is positioned as a solid component of the U.S. package.