Run the day-to-day privacy programme and legal operations in partnership with the General Counsel
Progress commercial, consumer, IP and governance matters within agreed parameters
Triage new legal matters, set priorities, form practical recommendations, manage stakeholders and close matters
Oversee and coordinate the privacy programme across the UK, EU, US and Canada
Advise on new or changed uses of personal data, including marketing technology, CRM, analytics, AI and vendor initiatives
Lead DPIAs, legitimate interests assessments and other privacy risk assessments
Review and negotiate DPAs and privacy terms and assess vendors handling personal data
Coordinate incident response and manage data subject requests to resolution
Maintain records of processing, retention framework, privacy and cookie notices, and consent standards
Support any appointed Data Protection Officer
Own Legal's intake and matter management, including deadlines, dependencies and open actions
Coordinate between the General Counsel, business stakeholders, external counsel and advisers
Progress routine and moderately complex matters independently and escape significant issues
Improve workflows, playbooks, templates and knowledge management using appropriate AI tools
Manage contract lifecycle from intake to post-signature
Draft, review and help negotiate NDAs, DPAs and commercial agreements
Coordinate vendor onboarding and risk review with Finance, Procurement and Cybersecurity
Coordinate the international trademark portfolio and brand protection matters
Handle counterfeits, impersonation, content theft and unauthorised brand use
Maintain terms of sale, return policies, DISCLAIMERS and customer-facing legal documentation across UK, US and Canadian sites
Support advice on customer journeys, subscriptions, checkout and post-purchase communications
Coordinate readiness for new consumer-law requirements and maintain disclosure standards
Coordinate review of corporate policies and published statements
Develop and deliver training on privacy, legal processes, IP, disclosures and endorsements
Manage, mentor and develop the Legal Assistant
Support the General Counsel on disputes, regulatory correspondence, employment matters and other priorities
Requirements
Substantial in-house legal, privacy or compliance experience, with strong legal literacy and ability to apply legal and regulatory requirements commercially
Significant hands-on privacy and data protection experience, including vendor assessments and DPAs, DPIAs, data subject rights, privacy notices, cookies and consent, incident response, records of processing and data retention
Experience running legal or compliance workflows and a varied caseload from intake through closure
Strong commercial judgement and confidence to progress matters independently while recognising when to escalate
Ability to investigate issues, identify material facts and risks, and present clear options and practical recommendations
Excellent organisation and prioritisation, including managing competing deadlines
Strong written and verbal communication, translating complex requirements for non-legal audiences
Strong stakeholder management and credibility to influence senior commercial and technical colleagues
High degree of professional ethics, discretion and integrity
Willingness to give and receive direct feedback, and to challenge and be challenged
Law degree, qualification as a lawyer, or another relevant legal or privacy qualification is advantageous but not required
Recognised privacy certification such as CIPP/E, CIPM or equivalent is desirable
Experience in e-commerce, D2C, consumer health or another regulated consumer category is desirable
Exposure to US or Canadian privacy, consumer protection or advertising requirements is desirable
Experience reviewing commercial contracts or managing contract lifecycle processes is desirable
Experience with trademark portfolio administration, brand protection or online enforcement is desirable
Core Competencies
Demonstrates extensive experience in privacy and data protection, including managing legal workflows, vendor assessments, and compliance with privacy regulations across multiple jurisdictions. Strong ability to communicate complex legal concepts to non-legal stakeholders while maintaining high ethical standards.
Highest-signal resume keywords
Privacy Programme Management
Data Protection Impact Assessments (DPIAs)
Vendor Assessments and Data Processing Agreements (DPAs)
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.