Legal Counsel- Data Privacy & Technology

Overview

As Vice President, Data Privacy & Technology Counsel, you will lead FactSet’s global privacy program for the EMEA region and advise on technology and AI governance. You’ll partner with Compliance, InfoSec, Product, and Engineering to enable responsible innovation while navigating a dynamic regulatory landscape. This senior role shapes privacy, data transfers, and risk response across multiple jurisdictions, driving trust and secure product design. You will influence regulators and cross-functional teams to support sustainable growth and cutting-edge solutions.

Pay / Benefits

• health, life, and disability insurance
• retirement savings plan
• employee stock purchase program
• paid time off for holidays, family leave, and wellness days
• flexible work accommodations
• career progression and learning opportunities

Responsibilities

• Design and mature FactSet’s global privacy program and policy framework across regions
• Advise on legal and regulatory implications of emerging technologies, including AI/ML, and shape responsible-Governance for frameworks like EU AI Act
• Negotiate and standardize data privacy and technology terms in client, supplier, and partner agreements; manage international data transfers
• Lead privacy risk management and incident response, including DPIAs and data mapping; advise Cybersecurity Crisis Management on incidents
• Engage regulators, monitor legislation, and lead privacy training and data subject rights processes
• Collaborate with US, Europe, and APAC attorneys and with CSO, CCO, Product and Engineering leadership

Key requirements

• Qualified lawyer admitted to practice in England & Wales (or equivalent)
• Minimum 5 years post-qualification experience in data privacy and technology law
• Deep expertise in UK GDPR, EU GDPR, Data Protection Act 2018; strong working knowledge of CCPA
• Strong grounding in technology law including AI/ML governance, cloud, SaaS, data licensing
• Proven ability to lead cross-functional, cross-jurisdictional initiatives and influence senior stakeholders

• cross-functional collaboration
• stakeholder management
• academic and regulatory curiosity
• AI/ML governance
• privacy-by-design and security-by-design
• data protection and transfer mechanisms (SCCs, UK IDTA, BCRs)

…