Overview
In this role you will review, draft and negotiate a broad range of supplier, technology and procurement contracts to support the firm’s strategic objectives while ensuring regulatory and data protection compliance. You will collaborate with Legal, Regulatory, Procurement, Data Protection and Information Security teams to promote best-practice governance and risk management across the business. The role involves due diligence, advisory work, and developing policies and training to empower cross‑functional teams. It offers the chance to shape procurement practices in a regulated, global firm and influence supplier relationships at scale.
Responsibilities
- Review, draft and negotiate supplier, technology and procurement-related contracts
- Identify and mitigate legal, regulatory, operational and commercial risks in contracts
- Assess supplier relationships for regulatory compliance within the risk framework
- Lead or support supplier negotiations and assist with client service agreement reviews
- Support initiatives involving new technologies with emphasis on data protection and information security
- Conduct supplier due diligence including data protection and information security reviews
- Collaborate with Data Protection and Information Security teams on contractual matters
- Support governance committees with legal and regulatory input on products, services and suppliers
- Develop, maintain and promote legal, procurement and risk management policies and best practice guidance
- Monitor regulatory developments and produce practical guidance, templates and training materials
- Work with risk lawyers and stakeholders to address emerging legal and compliance issues
- Design and deliver training on legal, procurement and risk topics to lawyers and business services teams
Key requirements
- Qualified Solicitor or Barrister with relevant post-qualification experience
- Strong experience drafting and negotiating commercial contracts, especially supplier, procurement and technology agreements
- Knowledge of UK data protection and privacy law (UK GDPR and Data Protection Act)
- Strong commercial awareness with practical, business-aligned legal advice
- Excellent stakeholder management and ability to influence at all levels
- Strong organisational and project management capabilities
- Analytical and problem-solving skills balancing detail with commercial/regulatory context
- Excellent written and verbal communication and ability to draft clear guidance and precedents
- Ability to understand complex issues and provide pragmatic recommendations
- Stakeholder management
- Analytical thinking
- Problem-solving
- Contract drafting and negotiation
- Supplier procurement
- UK GDPR and data protection
…
