Legal Compliance Lead Analyst - Cigna Healthcare

Start free →

Or apply yourself on the official page →

About the role

Role Purpose The Legal Compliance Lead Analyst supports Cigna International Health’s global privacy program and serves as the designated in-country representative of the Chief International Privacy Officer in engagements with competent data protection and other relevant authorities in India. The role combines privacy advisory expertise with disciplined, process and project driven delivery across core privacy operations. The role partners with business, Legal, Compliance, Information Protection and other relevant functions, acts within defined governance and escalation frameworks, and promptly escalates complex, high-risk or material regulatory matters to the International Privacy Officer referent. Key Responsibilities 1. Regulatory representation and governance • Act as the designated representative of the International Privacy Officer in communications and engagements with competent data protection and other relevant authorities in India, within formally delegated authority and approved positions. • Coordinate regulatory enquiries, information requests, meetings and follow-up actions, maintaining complete and accurate records and escalating material, sensitive or high-risk matters without delay. • Monitor relevant privacy and data protection developments in India and contribute to the development of legal expertise for strategic markets. • Support governance reporting, including the annual data protection report, management updates and evidence required for oversight. • Own and drive global, cross-jurisdictional International Privacy Office projects end to end, engaging directly with internal stakeholders as needed to move work forward without requiring escalation of routine coordination. 2. Privacy advisory and risk assessments • Act as a data protection subject matter expert for the business, providing practical advice on privacy issues and cross-border matters. • Lead or support Data Protection Impact Assessments (DPIAs), Transfer Impact Assessments (TIAs) and periodic reviews, ensuring that decisions, risks, mitigations and approvals are documented. • Identify potential data protection issues and opportunities for improvement, and contribute to structural, procedural and policy enhancements. • Identify matters requiring specialist legal, security or executive input and apply defined escalation protocols. • Conduct and progress AI assessments, reviewing respondent submissions, applying risk-tiering and classification criteria, aligning DPIA conclusions with AI Assessment findings, and advancing initiatives through the approval workflow. 3. Core privacy operations • Oversee and support the processing of Data Subject Rights requests using approved workflows, templates, intake channels, ticketing and tracking tools. • Maintain privacy registers, logs, trackers, review schedules and closure records, with a strong focus on quality, consistency and auditability. • Coordinate the administrative handling of personal data breaches and privacy incidents, working with Information Protection and relevant stakeholders. • Support shared privacy mailbox management and ensure that requests are triaged, assigned, tracked and closed appropriately. 4. Privacy framework, records and compliance monitoring • Support the implementation and maintenance of Records of Processing Activities (ROPA) for controller and processor activities. • Ensure that privacy policies, guidelines and procedures are defined, implemented, periodically reviewed and kept current. • Test and monitor compliance with applicable privacy requirements, including relevant Indian requirements and, where applicable to International Health activities, GDPR, UK, DIFC, Asian, Middle Eastern and African data protection frameworks. • Support audit readiness through

View the official posting →