The job profile for this position is Legal Compliance Senior Analyst, which is a Band 3 Senior Contributor Career Track Role.
Excited to grow your career?
We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply
Our people make all the difference in our success.
As a Data Protection Expert (DPE) you will be supporting Cigna's International Health global business, with strong focus on the Spanish domestic market. You will play an active role in all data protection-related matters. As a DPE you will ensure that Cigna International Health (International Health) processes the personal data of its customers, employees, vendors and providers in compliance with the applicable data protection rules. You will advise International Health business on data protection issues collaborating with compliance, legal and security experts.
Key Responsibilities:
* Contractual review and negotiation support.
* Data privacy assessments. (DPIAs, PIAs, LIAs, TIAs)
* Review and update privacy policies and operational processes to ensure ongoing compliance.
* Manage data subject rights and personal data breaches.
* Advice on and manage cross-border data transfers, including SCCs, BCRs, and other international mechanisms,
* Monitor regulatory developments and assess their impact on business operations.
* Support the Senior Data Privacy Expert in responding to requests from internal stakeholders, including Legal, Operations, Client Management, Clinical Teams, Procurement, and Security.
* Support the implementation and continuous improvement of privacy frameworks and governance models.
* Contribute to AI Governance initiatives.
* Engage with business units to embed privacy into operational processes, ensuring alignment with strategic goals and regulatory obligations.
Requirements :
Spanish law degree with broader European legal knowledge. Minimum of 5 years of professional experience in data protection, gained within an international company or a global law firm advising multinational clients. Experience working on cross-border matters. Proven experience in Insurance and health industry. Working knowledge of current data protection legislation in Europe. Demonstrated experience in implementing privacy frameworks and operationalizing privacy principles across business functions. Experience or strong interest in AI governance. Ability to work autonomously while being an integral part of a global, cross-functional privacy team. Data Protection Certifications are a plus (e.g. CIPP or similar) Fluent in English, with capability in a second language preferred but not required. Team Player.
Please note that you must meet our posting guidelines to be eligible for consideration. Policy can be reviewed at this link.