Data Privacy Lawyer- International Law Firm, In-House

An exceptional opportunity has arisen for a Data Privacy Lawyer to join a highly respected global in-house Risk & Compliance team in London.

DATA PRIVACY LAWYER

An exceptional opportunity has arisen for a Data Privacy Lawyer to join a highly respected global legal team based in London. This role sits at the heart of the General Counsel & Risk function, offering you the chance to make a significant impact on the firm’s worldwide data privacy and compliance landscape. With a remit that spans multiple jurisdictions, you will play a pivotal part in shaping and implementing robust data protection strategies, supporting innovative projects such as AI tool onboarding, and collaborating with colleagues across IT, procurement, and business services. The organisation is committed to fostering an inclusive and supportive environment where your expertise will be valued, your professional growth encouraged, and your contributions recognised. Flexible working opportunities are available, ensuring you can balance your career ambitions with personal commitments while being part of a forward-thinking team.

Responsiblities:

* Play a key role in managing global data privacy initiatives, including risk assessments for new systems and AI tools, ensuring the highest standards of compliance across all jurisdictions.
* Collaborate closely with cross-functional teams, such as IT Security, Procurement, and senior business managers to deliver practical solutions to complex data protection challenges.
* Benefit from flexible working arrangements and ongoing training opportunities within a supportive environment that values knowledge sharing and professional development.

As a Data Privacy Lawyer within this globally renowned legal team based in London, you will immerse yourself in a diverse range of responsibilities that span both strategic planning and hands-on operational work. Your day-to-day activities will involve close collaboration with colleagues across departments to ensure that all aspects of data collection, processing, storage, transfer, and destruction are managed in line with international best practices. You will be instrumental in driving continuous improvement of privacy frameworks, adapting policies to meet changing regulations and providing expert advice on emerging technologies such as artificial intelligence. By actively contributing to education initiatives and supporting audit processes across multiple regions, you will help maintain the organisation’s reputation for excellence in data governance while building strong relationships with stakeholders at every level.

* Manage the Data Protection Impact Assessment (DPIA) process by risk assessing new systems, processing activities, and suppliers while working collaboratively with project owners and IT Security.
* Work alongside Procurement and contract owners to identify and mitigate data protection risks in supply chains, ensuring appropriate contractual protections are implemented with support from legal subject matter experts.
* Support the firm’s AI Risk Assessment Committee by conducting data protection risk assessments for proposed new AI tools and advising on suitable safeguards to address any identified risks.
* Develop, manage, and implement global data privacy policies, standards, guidelines, and procedures, including updating intra-group transfer agreements to reflect evolving regulatory requirements.
* Assist with day-to-day operational issues such as incident management, mapping controls for privacy by design, maintaining incident registers, and monitoring compliance with retention periods and document deletion policies.
* Advise on privacy terms in client retainer documentation and respond to client requests for information or audit in partnership with Information Security teams.
* Provide guidance on responses to data subject requests, including correction, erasure, access, and portabilit, working with legal SMEs or HR as necessary to ensure timely and compliant outcomes.
* Contribute to awareness-raising initiatives by developing engaging content for data protection education programmes and keeping privacy issues prominent within the firm’s agenda.
* Assist senior business services managers in understanding key privacy risks associated with new services or products while supporting regional privacy programmes as needed.
* Support audit activities by helping manage privacy concerns during client audits, participating in internal reviews of specific offices or functions, responding to audit findings, and maintaining comprehensive risk assessments.

What you bring:

* A degree in law or a technical discipline is preferred; candidates should demonstrate strong academic credentials relevant to data privacy or information security.
* At least three years’ experience working within data privacy, data governance or information security roles; applications from those with less experience may be considered if they can evidence required competencies.
* Comprehensive knowledge of GDPR requirements coupled with an understanding of data protection laws in other jurisdictions relevant to global operations.
* Proven ability to liaise effectively with both legal professionals and IT staff when identifying risks or designing controls for complex environments.
* Experience drafting clear policies and procedures related to data protection while monitoring adherence across large organisations or multi-jurisdictional settings.
* Familiarity with IT standards (especially ISO 27001), control frameworks, technologies used for information security management, and good practice guidelines.
* Working knowledge of artificial intelligence applications, including awareness of unique data protection risks associated with AI implementation and how these intersect with regulatory obligations.
* Adaptable approach combined with diligence; able to work proactively under supervision but also contribute ideas independently when required.
* Excellent interpersonal skills enabling you to build trust-based relationships internally, particularly within IT teams, as well as externally when dealing with clients or auditors.

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates