Legal Compliance Senior Analyst - Cigna Healthcare

The Privacy Protection Analyst will contribute to the success of Cigna International Health s global privacy program by driving efficient, process-driven privacy operations within the Privacy Center of Excellence (COE).

This role is central to delivering consistent, scalable, and high-volume operational support , ensuring strong execution across key privacy processes. The data Protection Analyst will operate within a clearly defined framework, with a strong focus on quality and discipline, while partnering with senior privacy experts through effective escalation of complex or high-risk matters.

Key Responsibilities:

Core Privacy Operations (Primary Focus): Process Data Subject Rights (DSAR) requests using standard templates and workflows. Manage privacy requests intake, ticketing, and tracking tools. Maintain and update privacy registers, logs, and trackers. Support the processing of data breaches (administrative coordination). Ensure accurate documentation of cases and closure records. Maintain reviews schedule.

Vendor Contract Support (Non-Advisory): Complete privacy questionnaires (first-pass review), Support due diligence documentation collection and tracking, Process standard contract intake and coordinate routing to Legal/Privacy experts, Support template-based contractual privacy clauses population (non-negotiation)

Policy / Framework Operational Support. Support maintenance of: Records of Processing Activities (ROPA), Privacy policies and procedures (updates coordination). Assist in framework implementation tracking and documentation. Support audit readiness through document organization and evidence collection

Consent, Cookies Compliance Operations. Support cookie and consent management updates, Maintain records of consent implementation status, Assist with compliance tracking dashboards and reporting

Reporting Administrative Support: Prepare standard privacy dashboards and reports. Maintain metrics on DSARs, vendor reviews, and operational KPIs. Support inbox management (shared privacy mailboxes). Perform general administrative work (e.g., invoice follow-up, documentation)

Escalation Governance Discipline: Identify and escalate: High-risk requests, Regulatory issues, Complex legal questions, Ensure strict adherence to defined escalation protocols and SOPs

Profile Requirements :

• Law degree with broader European, Middle East or Asian legal knowledge
• 5+ years of experience in: Privacy operations, compliance operations, or legal operations
• Experience working with:
  • Ticketing systems and workflow tools
  • High-volume, process-driven environments
• Strong attention to detail and accuracy
• Ability to follow standard operating procedures (SOPs) rigorously
• Strong organizational and reporting skills
• Experience with data protection concepts (GDPR awareness)
• Experience with: DSAR processing, Vendor due diligence processes
• Certification (e.g., CIPP) is a plus but not required
• Fluent in English, with capability in a second language preferred but not required.
• Team Player.