Arnold Clark
Graduate Data Protection Analyst
Graduate Data Protection Analyst at Arnold Clark, based in Glasgow, Scotland. This is a permanent role with hybrid working.
- Pay
- Not given by the employer
- Hours and contract
- Permanent · Hybrid
- Location
- Glasgow, Scotland
- Closing date
- Sector
- Legal
Reference 92628
About the role
We have a brand-new opportunity for a Graduate Data Protection Analyst to join our data team based within our Head Office in Glasgow.
We offer:
- 33 days’ annual leave
- Flexible leave
- Generous employee discounts
- Private healthcare
- Workplace pension
- …and much more
Hours
Full time: Monday – Friday 37.5 hours per week.
Location
This is a hybrid role, with time spread between your home and our Head Office in Hillington, Glasgow.
About the role
You will support the delivery of the organisation’s data privacy programme. You will work closely with colleagues across the various businesses to provide data privacy advice and guidance to ensure that data can be used effectively, helping us achieve our business outcomes at pace and in a manner compliant with Group policies and in accordance with our strategy and governance framework.
You’ll be expected to work closely with the wider Data Protection and Information Security Team to support, deliver, embed and enhance our privacy processes and control framework.
Day to day duties
- Work towards becoming a Data Privacy SME providing advisory support in line with UK GDPR and DPA 2018 across the Arnold Clark Group and its subsidiaries
- Help to ensure Data Privacy is considered in new product, project and technology change processes, providing overview and challenge to support compliant delivery of new business propositions
- Collaborate with the wider data, risk and compliance teams to help ensure privacy risks and incidents are identified, managed and mitigated
- Support the creation and delivery of data privacy training and artefacts to guide our network of data champions, as well as building data protection knowledge across the wider business
- Assist in assessing the effectiveness of existing data management and controls framework
- Support the development of data quality policies and standards that reflect a privacy by design and privacy by default approach
- Support the creation of reports
- Collaborate with the data privacy champion network to help embed and support the adoption of good data governance practices across the group
- Use tools to identify and minimise data exposures.
Essential skills
- A graduate with at least 2:2 score in an Honours degree in law or information security related discipline, with no additional requirement for experience in the field. Work experience, even if unrelated to the field, and focus group participation is welcome so do include these in the application.
- A person with passion for privacy and/or information security with HNC, HND, BSc, still studying part-time, or a holder of relevant professional certifications or experience who can evidence paid or voluntary work in the related area.
SFIA skills profile
This role is aligned primarily to SFIA Level 2, reflecting an early-career data protection practitioner who works with guidance, supports established privacy processes and controls, gathers and reviews information, and develops specialist knowledge through practical experience.
| SFIA skill | Code | Target level | Application to this role |
| Information assurance | INAS | 2 | Assists with reviewing privacy controls and evidence to determine whether personal information is appropriately protected and handled. |
| Risk management | BURM | 2 | Supports the identification, recording, assessment and monitoring of data privacy risks and follows agreed escalation and treatment processes. |
| Information security | SCTY | 2 | Contributes to protecting personal information by supporting security and privacy controls, reviewing potential data exposures and escalating concerns. |
| Audit | AUDT | 2 | Collects and reviews evidence, supports structured control assessments and records findings for review by more experienced colleagues. |
| Records management | RMGT | 2 | Supports the maintenance and appropriate handling of records in accordance with established retention, governance and data management requirements. |
| Learning delivery | ETDL | 2 | Assists with preparing and delivering data privacy awareness materials, guidance and learning activities for colleagues and data champions. |
| Data analytics | DAAN | 2 | Gathers and analyses information to support privacy reporting, identify potential data exposures and assess the operation of privacy controls. |
| Methods and tools | METL | 2 | Uses approved privacy, governance and data discovery tools in accordance with documented processes and raises issues requiring specialist attention. |
Our Culture
Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals.
To find out more about Life at Arnold Clark, visit our website.
Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure checks.
Reference: 92628 · Posted 6 hours ago · Closes 3 Dec 2026 · Listed via Arnold Clark
Apply for this job
This role is listed via Arnold Clark. Applications are handled on the employer's site.
Apply on employer siteOpens the employer's website in a new tab.
Signed in? Every job you apply for counts toward your weekly goal and badges. How it works
Safe applying: a genuine employer will never ask you to pay for a DBS check, training or equipment, or move you onto WhatsApp before you are hired. If this listing does, report it and do not pay anything.