FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in UK data protection and privacy law, with a strong focus on advising on compliance, risk management, and governance frameworks. Capable of providing strategic legal support for data transformation initiatives and managing personal data incidents effectively.
Highest-signal resume keywords
Qualified Solicitor (England & Wales)5 Years’ Post-Qualification ExperienceUK GDPR KnowledgeData Processing Agreement DraftingBreach Response Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Data Protection LawPrivacy GovernanceContract NegotiationData Processing AgreementsRegulatory ReportingData Subject CommunicationsPrivacy Risk AssessmentData Governance FrameworksConsent ManagementAI and Data Ethics
Soft Skills
Pragmatic Legal AdviceSound JudgmentAbility to Manage PrioritiesResponsive Legal Support
Industry Keywords
Data Protection Act 2018PECRICO GuidanceEU GDPRInternational Privacy FrameworksData Sharing AgreementsTransfer Risk AssessmentsPrivacy-by-DesignOperational Privacy QueriesData Inventories
About the role
Key responsibilities & impact- Provide expert legal advice and strategic support on data protection, privacy and information governance across the Group
- Support development and maintenance of the Group Data Enablement Framework
- Embed legal and privacy requirements in enterprise data governance standards, policies and processes
- Advise on accountability obligations, lawful processing and privacy-by-design requirements
- Support governance committees and decision-making forums
- Review, draft and negotiate contracts involving personal data processing or sharing
- Advise on supplier, customer and technology agreements involving personal data
- Handle operational privacy queries concerning subject access requests, retention, lawful basis, marketing, complaints and employee data
- Advise on data flows, system integrations and enterprise data architecture
- Review technologies and transformation programmes for privacy risks
- Support records of processing, data inventories, classification, ownership, lawful basis, retention and processing-purpose documentation
- Advise on customer data use for analytics, profiling, segmentation, AI and commercial initiatives
- Advise on consent, legitimate interests and direct marketing obligations
- Provide legal advice on generative AI, machine learning and automated decision-making
- Support AI governance frameworks and policies and monitor AI regulation
- Lead legal response to personal data incidents and breaches
- Assess severity, advise on regulatory notifications, manage ICO notifications and coordinate communications
- Coordinate breach response with Information Security, Compliance and Communications
- Manage engagement with the ICO, including investigations and formal inquiries
- Design and deliver privacy training and awareness programmes
- Promote a practical data protection culture across the organisation
Requirements
What you’ll need- Qualified Solicitor (England & Wales) or equivalent legal qualification
- Minimum 5 years’ post-qualification experience advising on UK data protection and privacy law
- Strong experience leading or supporting enterprise data transformation or digital transformation programmes
- Significant experience reviewing and negotiating commercial contracts involving personal data in multiple jurisdictions, ideally with considerable APAC experience
- Significant experience drafting and negotiating Data Processing Agreements, Data Sharing Agreements, International Data Transfer Agreements, Standard Contractual Clauses, technology and outsourcing agreements, and Transfer Risk Assessments
- Experience advising on customer data, marketing, profiling and consent management
- Experience responding to day-to-day operational privacy queries
- Deep experience advising on breach assessment, notification thresholds, ICO/regulatory reporting, data subject communications, internal investigations, remediation and post-incident governance
- Substantial experience within an in-house legal function
- Experience advising on personal data breach response, including ICO notifications and third-party/data-subject notifications
- Extensive knowledge of UK GDPR and the Data Protection Act 2018
- Knowledge of the Data (Use and Access) Act 2025
- Knowledge of PECR and ICO guidance
- Knowledge of EU GDPR and international privacy frameworks
- Knowledge of DPAs, IDTAs, SCCs, ROPAs, DPIAs and LIAs
- Knowledge of customer data governance, profiling, marketing permissions and consent management
- Knowledge of AI, automated decision-making and data ethics
- Knowledge of enterprise data governance frameworks
- Ability to provide pragmatic, commercially focused legal advice
- Ability to draft, review and negotiate contracts involving personal data
- Ability to interpret legislation and regulatory guidance
- Ability to analyze complex data processing activities and identify legal/privacy risks
- Ability to support strategic data governance and privacy-by-design programmes
- Ability to manage multiple priorities and provide responsive legal support
- Sound judgment when advising on new or high-risk data initiatives
Benefits
Comp & perks- Equal opportunity employer
- Support throughout the interview process
- Environment where employees can achieve their full potential and do interesting and meaningful work
- Opportunity to work on interesting and meaningful projects
- Pronoun inclusion in applications
- Support and reasonable assistance during the interview process