Risk Manager (Data protection)

A leading law firm in London is seeking a knowledgeable and considerate Risk Manager with a focus on Data Protection to join their collaborative Risk Team. This is an exceptional opportunity for you to play a pivotal role in shaping the firm's approach to risk, compliance, and data security, while working closely with senior stakeholders and supporting the professional growth of junior colleagues.

Role responsibilities:

• Support the Director of Risk by delivering comprehensive risk management and compliance services with a particular emphasis on data protection and information security.
• Manage complex data-related issues such as subject access requests, client file requests, and the handling of data breaches with sensitivity and attention to detail.
• Conduct impact assessments and legitimate interest assessments for new business initiatives to ensure robust compliance with relevant regulations.
• Maintain up-to-date Registers of Processing Activities as well as data protection policies and procedures to ensure ongoing adherence to legal standards.
• Design and deliver engaging departmental training sessions that raise awareness of firm policy and encourage widespread compliance among staff.
• Collaborate closely with divisional leads and business leaders to provide expert advice on all aspects of data, risk, and compliance related to new projects or initiatives.
• Produce detailed reports monitoring data trends in order to identify opportunities for improvement in current data security arrangements.
• Monitor changes in legal and regulatory requirements affecting the operation of the firm, interpreting these changes for practical application within the business context.

Requirements:

• Proven experience working within risk management or compliance functions in a law firm environment where collaboration is key.
• Expert knowledge of laws, regulations, and codes of conduct applicable to law firms—including legal privilege—and their practical application within daily operations.
• In-depth understanding of data protection legislation (such as GDPR) alongside information security best practices relevant to professional services settings.
• Excellent communication skills demonstrated through clear report writing as well as the ability to explain complex concepts sensitively to diverse audiences.
• Demonstrated capability in coaching or mentoring others—supporting their development through encouragement and shared learning experiences.

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates