Analyst, DSR

About the role

The DSR Analyst is responsible for supporting the global delivery of Data Subject Rights (DSR) operations and privacy compliance across Carnival Corporation, ensuring consistent and compliant handling of personal data across both North America and UK brands. This role involves the end-to-end management and timely processing of DSR requests, supporting incident response activities, and contributing to the effective operation and continuous improvement of global data protection processes. The DSR Analyst will work closely with the global Privacy team and cross-functional business stakeholders to deliver consistent, high-quality outcomes and uphold regulatory and organizational standards.

Responsibilities

• Data Subject Rights: Manage the end-to-end lifecycle of DSR requests across UK and North America brands, ensuring timely, accurate, and compliant responses in line with applicable data protection laws and internal standards. This includes coordinating data retrieval, reviewing and redacting information, and maintaining clear audit trails.
• Privacy incidents: Support data incident response activities by assisting in the investigation, documentation, and resolution of personal data incidents, ensuring appropriate escalation and alignment with regulatory requirements and internal policies.
• Process Improvement and Governance: Contribute to the ongoing improvement of privacy processes by identifying inefficiencies and assisting with updates to procedures and documentation. Contribute to governance activities by maintaining records and supporting reporting and compliance monitoring.
• Advice and Guidance: Support stakeholders across the global organization with timely, accurate and clear privacy guidance and advice, escalating as necessary.
• Privacy by Design & Project Support: Support the wider Privacy team in embedding privacy by design principles across business activities, including assisting with Data Protection Impact Assessments (DPIAs), project reviews, and procurement processes where necessary.
• Performs other duties as assigned

Requirements

• Willingness to work towards a recognized privacy certification (e.g. IAPP CIPP, CIPM or CIPT, ISACA CDPSE, or equivalent)
• Awareness of global data protection and privacy principles, with an understanding of how regulatory requirements impact the handling of personal data.
• Exposure to supporting activities such as the identification, review, or redaction of personal data, including an understanding of applying legal exemptions under guidance.
• Experience handling sensitive or confidential information in a responsible and professional manner.
• Experience supporting administrative, case-based, or process-driven activities within a professional or regulated environment, with a focus on accuracy and attention to detail.
• Ability to manage multiple tasks and priorities within a deadline-driven environment.
• Ability to communicate clearly in writing and verbally, including drafting responses, reports, or business communications.
• Experience using Microsoft 365 and Office tools (e.g. Outlook, Excel, Word, Teams) to support day-to-day work and collaboration.

Benefits

• Health Benefits: Cost-effective medical, dental and vision plans, Employee Assistance Program and other mental health resources, company paid term life insurance and disability coverage
• Financial Benefits: 401(k) plan that includes a company match, Employee Stock Purchase plan
• Paid Time Off: Holidays, Vacation Time, Sick Time
• Other Benefits: Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends, personal and professional learning and development resources including tuition reimbursement