Privacy Protection Analyst

Location: Bengaluru, India
Department: Legal

The Privacy Protection Analyst will contribute to the success of Cigna International Health's global privacy program by driving efficient, process-driven privacy operations within the Privacy Center of Excellence (COE).

This role is central to delivering consistent, scalable, and high-volume operational support, ensuring strong execution across key privacy processes.

Key Responsibilities:

• Core Privacy Operations (Primary Focus): Process Data Subject Rights (DSAR) requests using standard templates and workflows. Manage privacy requests intake, ticketing, and tracking tools. Maintain and update privacy registers, logs, and trackers. Support the processing of data breaches (administrative coordination). Ensure accurate documentation of cases and closure records. Maintain reviews' schedule.

• Vendor & Contract Support (Non-Advisory): Complete privacy questionnaires (first-pass review), Support due diligence documentation collection and tracking, Process standard contract intake and coordinate routing to Legal/Privacy experts, Support template-based contractual privacy clauses population (non-negotiation)

• Policy / Framework Operational Support: Support maintenance of: Records of Processing Activities (ROPA), Privacy policies and procedures (updates coordination). Assist in framework implementation tracking and documentation. Support audit readiness through document organization and evidence collection

• Consent, Cookies & Compliance Operations: Support cookie and consent management updates, Maintain records of consent implementation status, Assist with compliance tracking dashboards and reporting

• Reporting & Administrative Support: Prepare standard privacy dashboards and reports. Maintain metrics on DSARs, vendor reviews, and operational KPIs. Support inbox management (shared privacy mailboxes). Perform general administrative work (e.g., invoice follow-up, documentation)

• Escalation & Governance Discipline: Identify and escalate: High-risk requests, Regulatory issues, Complex legal questions, Ensure strict adherence to defined escalation protocols and SOPs

Profile & Requirements

• Law degree with broader European, Middle East or Asian legal knowledge
• 5+ years of experience in: Privacy operations, compliance operations, or legal operations
• Experience working with: Ticketing systems and workflow tools, High-volume, process-driven environments
• Strong attention to detail and accuracy
• Ability to follow standard operating procedures (SOPs) rigorously
• Strong organizational and reporting skills
• Experience with data protection concepts (GDPR awareness)
• Experience with: DSAR processing, Vendor due diligence processes
• Certification (e.g., CIPP) is a plus but not required
• Fluent in English, with capability in a second language preferred but not required.
• Team Player.