Overview
In this role you will provide senior-level legal and practical guidance on UK and EU GDPR and international privacy requirements to support Colt’s global data protection programme. You will help drive AI governance, regulatory projects and privacy-by-design across the business, collaborating with Product, Technology, Security and other stakeholders. You will lead DPIAs, TIAs and privacy risk assessments, delivering regulator-defensible advice and governance documents. This is a high-impact, senior individual contributor role aligned with Colt’s data protection strategy and international scope. You will work with cross-functional teams to advance privacy maturity and compliance at scale.
Pay / Benefits
- life insurance
- private health insurance
- pension plan
- flexible benefits scheme
- volunteering opportunities
- international environment
Responsibilities
- Provide expert advice on UK GDPR, EU GDPR and international privacy laws
- Lead and deliver DPIAs, TIAs, privacy risk assessments and privacy-by-design reviews
- Draft, review and negotiate data processing agreements and governance documents
- Advise stakeholders across Product, Technology, Security, Procurement, HR, Sales and Legal on privacy requirements
- Support AI tools, automation, digital transformation and customer-facing AI initiatives from a privacy perspective
- Lead and manage vendor privacy assessments
- Support the digitalisation of Data Protection processes and tools
- Support data incident investigations, breach assessments, remediation and regulatory documentation
- Support audits, regulatory projects, training and continuous improvement of policies and controls
- Develop and deliver privacy training programs for employees
- Provide DSAR governance and support to meet obligations while maintaining accountability
- Monitor regulatory developments and propose implementation actions
- Collaborate with the team to maintain a proactive, collaborative working style
Key requirements
- 7-10 years of relevant experience in data protection, privacy law or regulatory compliance in an international environment
- Strong practical knowledge of UK GDPR, EU GDPR, international transfers and multi-jurisdictional matters
- Proven experience leading DPIAs, TIAs, privacy-by-design reviews and vendor assessments
- Experience with technology, digitalisation, AI governance, product privacy or processor services
- Excellent drafting, analysis, negotiation, communication and problem-solving skills
- Fluent English; another European language desirable
- A legal qualification or equivalent senior privacy experience; CIPP/E, CIPM, AIGP or equivalent desirable
- High personal accountability and ability to drive progress with limited direction
- Ability to prepare clear, practical recommendations for decision-making
- Ability to manage competing priorities, tight deadlines and large workloads
- Strong stakeholder engagement and communication skills
- Practical problem-solving mindset and regulator-ready output
- collaborative
- proactive
- strong communication
- UK GDPR and EU GDPR expertise
- DPIA and TIA leadership
- privacy-by-design
…