Data Protection Officer – Privacy & Compliance Lead

About the role

The Data Protection Officer will join the Risk & Compliance team of a leading international law firm, shaping the firm’s global privacy strategy. Working in a hybrid London setting, you will partner with senior stakeholders, legal specialists, information security and data governance teams to ensure compliance with UK GDPR, EU GDPR and other international privacy laws.

Key responsibilities

• Develop and maintain the firm’s data protection and privacy governance framework.
• Advise business units on compliance with UK GDPR, EU GDPR and global privacy legislation.
• Lead and oversee DPIAs, DTIAs and maintain Records of Processing Activities (RoPA).
• Review third‑party processing agreements, including Article 28 contracts, SCCs and IDTAs.
• Manage privacy compliance for projects, new technologies and operational changes.
• Provide guidance on AI governance, automated decision‑making and emerging technologies.
• Handle DSARs, personal data breach response and regulatory notifications.
• Deliver privacy training and conduct internal audits to monitor ongoing compliance.

Required profile

• Proven experience as a Data Protection Officer, Privacy Manager or similar role.
• Strong knowledge of UK GDPR, EU GDPR and international privacy regulations.
• Background in a regulated environment, preferably legal or professional services.
• Legal qualification or equivalent data‑privacy experience.

Required skills

What we offer

• Opportunity to influence privacy strategy within a respected professional services firm.
• Hybrid working model in London.
• Competitive remuneration package.