Privacy Protection Analyst at Cigna Group: Apply Now!

The Cigna Group is seeking a Privacy Protection Analyst to support Cigna International Health’s global privacy programme, focusing on privacy operations, data protection compliance, and process management.
About Cigna Healthcare
Cigna Healthcare, a division of The Cigna Group, advocates for better health at every stage of life. The organisation guides customers through the healthcare system and empowers them with the information and insights needed to make informed decisions to improve their health and vitality.

About the Job
The Cigna Group is hiring for the position of Privacy Protection Analyst to support Cigna International Health’s global privacy programme within the Privacy Centre of Excellence (COE).
The role focuses on efficient, process-driven privacy operations, ensuring consistent, scalable, and high-volume operational support. The analyst will work within defined frameworks, maintain quality and procedural discipline, and escalate complex or high-risk matters to senior privacy experts.
Eligibility
- A law degree with broader knowledge of European, Middle Eastern, or Asian legal systems.
- At least 5 years of experience in privacy operations, compliance operations, or legal operations.
- Experience working with ticketing systems and workflow tools.
- Experience in high-volume, process-driven environments.
- Strong attention to detail and accuracy.
- Ability to follow standard operating procedures (SOPs) rigorously.
- Strong organisational and reporting skills.
- Understanding of data protection concepts, including GDPR.
- Experience in Data Subject Access Request (DSAR) processing and vendor due diligence processes.
- Fluency in English; knowledge of a second language is preferred but not required.
- A team-oriented approach.
Preferred Certification: Certifications such as CIPP are an advantage but are not mandatory.
Responsibilities
Core Privacy Operations

- Process Data Subject Access Requests (DSARs) using standard templates and workflows.
- Manage privacy request intake, ticketing, and tracking tools.
- Maintain and update privacy registers, logs, and trackers.
- Support administrative coordination for data breach processing.
- Ensure accurate case documentation and closure records.
- Maintain review schedules.
Vendor and Contract Support
- Complete privacy questionnaires through first-pass reviews.
- Support the collection and tracking of due diligence documentation.
- Process standard contract intake and coordinate routing to Legal and Privacy experts.
- Populate standard contractual privacy clauses using templates, without negotiation.
Policy and Framework Operational Support
- Support the maintenance of Records of Processing Activities (ROPA), privacy policies, and procedures.
- Coordinate updates to privacy policies and procedures.
- Track and document framework implementation.
- Support audit readiness through document organisation and evidence collection.
Consent, Cookies and Compliance Operations
- Support cookie and consent management updates.
- Maintain records of consent implementation status.
- Assist with compliance tracking dashboards and reporting.
Reporting and Administrative Support
- Prepare standard privacy dashboards and reports.
- Maintain metrics relating to DSARs, vendor reviews, and operational KPIs.
- Support shared privacy mailbox management.
- Perform general administrative tasks, including invoice follow-ups and documentation.
Escalation and Governance
- Identify and escalate high-risk requests, regulatory issues, and complex legal questions.
- Ensure strict adherence to defined escalation protocols and standard operating procedures.



