Privacy Risk & Assurance Analyst at dunnhumby Norge AS

Gurugram, haryana, India -

Full Time

Start Date

Immediate

Expiry Date

15 Oct, 26

Salary

0.0

Posted On

17 Jul, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Privacy Risk Management, Data Protection, Compliance Assurance, Information Security, Data Governance, Risk Mitigation, DSPM, ROPA, Audit Documentation, Control Gap Analysis, Data Hygiene, Securiti Tooling

Industry

technology;Information and Media

Description

dunnhumby is the global leader in Customer Data Science, partnering with the world’s most ambitious retailers and brands to put the customer at the heart of every decision. We combine deep insight, advanced technology, and close collaboration to help our clients grow, innovate, and deliver measurable value for their customers. dunnhumby employs nearly 2,500 experts in offices throughout Europe, Asia, Africa, and the Americas working for transformative, iconic brands such as Tesco, Coca-Cola, Nestlé, Unilever and Metro. Most companies try to meet expectations, dunnhumby exists to defy them. Using big data, deep expertise and AI-driven platforms to decode the 21st century human experience – then redefine it in meaningful and surprising ways that put customers first. Across digital, mobile and retail. For brands like Tesco, Coca-Cola, Procter & Gamble and PepsiCo. We’re looking for a talented Privacy Risk & Assurance Analyst who expects more from their career. It’s a chance to work with our clients to implement our data platforms and software products. It’s an opportunity to work with a market-leading business to explore new opportunities for us and influence global retailers. In this role, you support the data risk model by assuring, maintaining, and improving the quality of privacy and data‑risk information across our securiti* tooling and processes. You perform second‑line assurance, manage issues and risks through their lifecycle, and resolve privacy‑relevant DSPM issues to strengthen controls, reduce exposure, and improve our compliance posture. Your focus is assurance, risk management, data quality, and precision in applying privacy requirements. Qualifications: 2+ years of experience in privacy, data protection, risk, compliance, information security, or data governance. Practical exposure to structured reviews or checks of operational inputs, for example: Reviewing request forms, assessments, or registers for completeness and accuracy. Validating evidence against stated requirements or controls. Experience working with systems or tools that hold risk, privacy, or compliance data, with an understanding that: Ability to follow defined assurance steps or test scripts, document findings clearly, and escalate issues where evidence is missing or weak. Some exposure to issue or action tracking, such as logging findings, updating status, or following up with owners under guidance. Strong attention to detail and a demonstrable habit of checking, questioning, and correcting inaccuracies. Clear written communication skills, suitable for maintaining logs, notes, and audit‑ready records. Willingness and ability to learn complex tooling and processes, and to apply feedback consistently Key Responsibilities: Conduct assurance reviews of privacy and security requests (CRAs, VRAs, controller requests), validating routing, inputs, controls, and risk mitigation. Identify control gaps and failing controls, support remediation, and maintain assurance evidence and documentation. Support end‑to‑end request flows, data hygiene, and accurate ROPA and backend records within the Securiti platform, including legacy remediation. Track and manage issues arising from assurance, RACM testing, incidents, DSPM findings, and horizon scanning through to closure. Identify recurring risk themes and contribute to playbooks, control updates, and process improvements. Review DSPM outputs to validate sensitive data locations, classifications, and data flows, ensuring alignment with ROPA and Securiti records. Support remediation of privacy‑relevant data exposure risks in collaboration with product, data, and information security teams. What you can expect from us We won’t just meet your expectations. We’ll defy them. So you’ll enjoy the comprehensive rewards package you’d expect from a leading technology company. But also, a degree of personal flexibility you might not expect. Plus, thoughtful perks, like flexible working hours and your birthday off. You’ll also benefit from an investment in cutting-edge technology that reflects our global ambition. But with a nimble, small-business feel that gives you the freedom to play, experiment and learn. And we don’t just talk about diversity and inclusion. We live it every day – with thriving networks including dh Gender Equality Network, dh Proud, dh Family, dh One, dh Enabled and dh Thrive as the living proof. We want everyone to have the opportunity to shine and perform at your best throughout our recruitment process. Please let us know how we can make this process work best for you. Our approach to Flexible Working At dunnhumby, we value and respect difference and are committed to building an inclusive culture by creating an environment where you can balance a successful career with your commitments and interests outside of work. We believe that you will do your best at work if you have a work / life balance. Some roles lend themselves to flexible options more than others, so if this is important to you please raise this with your recruiter, as we are open to discussing agile working opportunities during the hiring process. For further information about how we collect and use your personal information please see our Privacy Notice which can be found (here)

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The role involves performing second-line assurance to maintain the quality of privacy and data-risk information using Securiti tooling. Key tasks include managing risk lifecycles, validating sensitive data locations, and remediating privacy-relevant data exposure risks.