Compliance Lawyer (Data protection focus)

A leading law firm in Guildford is seeking a Compliance Lawyer with a strong focus on data protection to join their highly respected Risk and Compliance function. This role offers the opportunity to work closely with senior stakeholders, including the Head of Risk and Compliance and the firm's Data Protection Officer, to promote and maintain the highest standards of legal, regulatory, and ethical compliance across the organisation.

Role responsibilities:

• Lead day-to-day data protection matters within the Risk & Compliance function by working closely with the Data Protection Officer and other stakeholders to identify, assess, and manage risks across the firm.
• Provide expert advice on data protection and privacy laws while managing complex breaches and responses in accordance with regulatory requirements.
• Advise on data protection impact assessments (DPIAs), legitimate interests assessments (LIAs), accountability requirements, and contribute to developing robust policies and procedures.
• Design and deliver firmwide training sessions on risk management and compliance topics including data protection best practices.
• Undertake thorough risk and compliance assessments of prospective suppliers by conducting due diligence reviews and contract evaluations.
• Offer guidance on emerging regulatory issues such as artificial intelligence (AI) alongside traditional areas like anti-money laundering (AML), conflicts of interest, supplier risk, professional conduct, client engagement letters, terms of business, client policies, and questionnaires.
• Build strong relationships with partners and lawyers throughout the firm by identifying risk issues relevant to their clients or practice areas.
• Contribute actively to the file audit programme by evaluating outcomes and collaborating with teams on corrective actions.
• Draft new policies/procedures while updating existing ones to ensure continued alignment with evolving legal standards.
• Prepare detailed reports for senior management regarding risk/compliance issues; keep abreast of legal/regulatory changes; communicate updates effectively across teams.

Role requirements:

• Qualified lawyer typically with at least three years’ post-qualification experience (PQE) gained within either a risk/compliance environment or private practice; applications from candidates with different levels of PQE but relevant experience are welcomed.
• Strong knowledge of data protection law/practice as well as contract law; proven ability to advise on privacy regulations including GDPR.
• Familiarity with legal/regulatory/professional standards applicable to law firms; understanding of compliance/risk issues affecting legal practice.
• Experience developing/implementing best practice standards/procedures within a legal context; ability to manage complex issues efficiently.
• Proven track record advising senior stakeholders on sensitive matters; confidence engaging constructively at all levels within an organisation.
• Experience supervising/mentoring junior colleagues is desirable; willingness to support team members’ growth through knowledge sharing.
• Interest in leveraging technology/AI tools within legal practice; openness to adopting innovative solutions that enhance compliance processes.
• Excellent legal analysis/drafting skills coupled with high professional standards/attention to detail; ability to produce clear documentation under pressure.

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates