Overview

An established, internationally recognised financial services organisation is seeking an Assistant General Counsel to join its Legal team. This is an excellent opportunity for a privacy and data protection lawyer who enjoys working at the intersection of regulation, technology, cybersecurity, and commercial contracting. The role offers broad exposure across Europe and other global jurisdictions, partnering closely with senior stakeholders across legal, compliance, technology, information security, and business functions.

The Opportunity

Reporting into a senior legal leadership team, you will play a key role in advising on privacy, data protection, cybersecurity, and AI-related legal issues. You will support the development and enhancement of privacy frameworks, advise on regulatory matters, negotiate commercial agreements, and help manage data protection risks across the business.

This opportunity will be based in London or Dublin.

Key Responsibilities

• Advise on international privacy and data protection laws, including UK GDPR, EU GDPR, ePrivacy requirements, and other global privacy regulations.
• Support the development, implementation, and ongoing maintenance of privacy and cybersecurity policies and procedures.
• Lead and advise on privacy impact assessments, legitimate interest assessments, third-party due diligence, and cross-border data transfer matters.
• Assist with incident and breach response alongside legal, compliance, technology, and information security teams.
• Draft, review, and negotiate a range of commercial agreements, including data processing agreements, vendor contracts, technology agreements, and client-facing contracts.
• Provide pragmatic advice on privacy risk allocation and compliance within commercial negotiations.
• Monitor developments in privacy, cybersecurity, and artificial intelligence regulation, providing guidance to stakeholders on emerging risks and requirements.
• Deliver privacy training and awareness initiatives across the organisation.
• Engage with regulators, external advisers, and auditors where required.
• Support governance activities and prepare materials for senior management and committees.

Required Qualifications

• Qualified solicitor in England & Wales or Ireland.
• Approximately 4-12 years' post-qualification experience with significant exposure to privacy and data protection matters.
• Strong experience drafting and negotiating commercial agreements with privacy-related provisions.
• Deep understanding of UK and EU GDPR, international data transfers, vendor risk, and cybersecurity fundamentals.
• Relevant privacy certifications (such as CIPP/E, CIPM, or similar) are preferred but not required.