Senior Data Privacy & AI Lawyer / Senior Data Privacy & AI Manager

Overview

In this role, you will lead and embed the firm’s privacy and AI governance across the EMEAPAC region, partnering with the DPO and Head of Regulatory Risk. You’ll translate strategy into operational delivery, guiding governance, risk assessments, and regulatory compliance. You will engage with senior stakeholders to shape privacy programmes, respond to incidents, and drive responsible AI initiatives. This is a hands-on, advisory position with a clear impact on legal and client-facing operations.

Pay / Benefits

• hybrid work model
• flexible work arrangements
• family-friendly policies
• health and wellbeing programmes
• inclusive recruitment
• equal opportunities

Responsibilities

• Support the privacy and AI governance programme as it evolves
• Monitor global data protection and AI regulatory developments (EU AI Act)
• Develop and maintain policies, frameworks and governance standards
• Manage core operational processes (RoPAs, DPIAs, DSARs)
• Embed Privacy by Design and oversee AI risk assessments
• Provide practical guidance to business and technical teams
• Deliver privacy and AI training and raise awareness
• Support incident response, breach management and regulatory engagement
• Draft and negotiate data protection terms in supplier contracts and oversee vendor risk assessments
• Collaborate across legal and business services to ensure consistent governance
• Support and deputise for Head of Regulatory Risk and DPO
• Act as SME on legal/regulatory risks for AI governance with a solutions-focused mindset
• Translate strategy into operational execution across EMEAPAC
• Advise business and technical stakeholders
• Negotiate with suppliers and liaise with clients on privacy/AI requirements
• Embed privacy and responsible AI principles across projects and processes

Key requirements

• Degree required; legal qualification preferred
• Recognised certification in data privacy
• 4–7 years’ experience in privacy/data protection (multi-jurisdictional)
• Strong knowledge of global data protection laws and emerging AI regulation
• Experience delivering privacy programmes
• Hands-on DPIAs, RoPAs and data subject rights processes
• Confidence with AI and AI governance development
• Experience handling complex, time-sensitive incidents, audits, regulatory inquiries
• Strong analytical, communication and stakeholder management skills
• Collaborative, proactive and adaptable approach

• collaborative
• proactive
• adaptable
• DPIAs
• RoPAs
• data subject rights processes

…