Privacy Protection Analyst at The Cigna Group
The Cigna Group is inviting applications for the position of Privacy Protection Analyst to support Cigna International Health's global privacy programme within its Privacy Centre of Excellence (COE).
The role focuses on privacy operations, data protection compliance, workflow management, documentation, and process improvement. It is suited to experienced professionals who can manage high-volume operational work while following established procedures and escalating complex or high-risk matters appropriately.
About Cigna Healthcare
Cigna Healthcare, a division of The Cigna Group, supports people in navigating the healthcare system and making informed decisions about their health and well-being.
About the Job
The Privacy Protection Analyst will provide process-driven operational support for the organisation's global privacy programme. The role involves handling privacy requests, maintaining records and trackers, supporting vendor due diligence, coordinating policy updates, and assisting with compliance reporting and audit readiness.
The successful candidate will work within defined frameworks and standard operating procedures, maintaining accuracy and consistency while referring complex legal or regulatory issues to senior privacy experts.
Eligibility Criteria
Applicants should have:
A law degree and broader knowledge of European, Middle Eastern, or Asian legal systems.
At least 5 years of experience in privacy operations, compliance operations, or legal operations.
Experience using ticketing systems and workflow tools.
Experience working in high-volume, process-driven environments.
Strong attention to detail and accuracy.
The ability to follow standard operating procedures rigorously.
Strong organisational, documentation, and reporting skills.
An understanding of data protection concepts, including the General Data Protection Regulation (GDPR).
Experience processing Data Subject Access Requests (DSARs) and supporting vendor due diligence.
Fluency in English. Knowledge of an additional language is preferred but not mandatory.
A collaborative, team-oriented approach.
Preferred certification: Privacy certifications such as CIPP are an advantage but are not mandatory.
Key Responsibilities
1. Core Privacy Operations
Process Data Subject Access Requests (DSARs) using standard templates and workflows.
Manage privacy request intake, ticketing, and tracking systems.
Maintain and update privacy registers, logs, and trackers.
Provide administrative coordination for data breach processing.
Ensure accurate case documentation and closure records.
Maintain review schedules.
2. Vendor and Contract Support
Conduct first-pass reviews of privacy questionnaires.
Collect and track vendor due diligence documentation.
Process standard contract intake and coordinate routing to Legal and Privacy experts.
Populate standard contractual privacy clauses using approved templates, without negotiating contractual terms.
3. Policy and Framework Support
Support maintenance of Records of Processing Activities (ROPA), privacy policies, and procedures.
Coordinate updates to privacy policies and procedures.
Track and document implementation of privacy frameworks.
Support audit readiness through document organisation and evidence collection.
4. Consent, Cookies and Compliance Operations
Support cookie and consent management updates.
Maintain records of consent implementation status.
Assist with compliance tracking dashboards and reporting.
5. Reporting and Administrative Support
Prepare standard privacy dashboards and reports.
Maintain metrics relating to DSARs, vendor reviews, and operational key performance indicators (KPIs).
Support management of shared privacy mailboxes.
Handle administrative tasks, including invoice follow-ups and documentation.
6. Escalation and Governance
Identify and escalate high-risk requests, regulatory concerns, and complex legal questions.
Follow established escalation protocols and standard operating procedures.
Position Details
Organisation: The Cigna Group
Business Division: Cigna Healthcare / Cigna International Health
Position: Privacy Protection Analyst
Experience Required: At least 5 years
Practice Areas: Data Privacy, Data Protection, GDPR Compliance, Privacy Operations, Legal Compliance
Location: Refer to the official job listing
Application Mode: Online
How to Apply
Interested candidates can review the job description and submit their application through The Cigna Group's official careers portal.
Applicants should verify the advertised title, location, work arrangement, and full eligibility requirements on the official careers page before applying.
Application deadline: Not specified in the supplied announcement.