Data Protection Manager – Risk & Compliance

About the role

Join a leading London law firm as a Data Protection Manager within the Risk Team. You will play a pivotal role in shaping the firm’s approach to data security, compliance and risk, working closely with senior stakeholders and mentoring junior colleagues.

Key responsibilities

• Support the Director of Risk by delivering comprehensive risk management and compliance services, focusing on data protection and information security.
• Handle complex data‑related issues such as subject access requests, client file requests and data breach investigations.
• Conduct impact assessments and legitimate interest assessments for new business initiatives.
• Maintain Registers of Processing Activities and keep data protection policies up to date.
• Design and deliver training sessions to raise awareness of data protection policies across the firm.
• Provide expert advice to divisional leads on data, risk and compliance matters for new projects.
• Produce reports monitoring data trends and recommend improvements to security arrangements.
• Monitor legal and regulatory changes and translate them into practical guidance.

Required profile

• Proven experience in risk management or compliance within a law‑firm environment.
• Deep knowledge of data protection legislation (e.g., GDPR) and information‑security best practices.
• Strong understanding of legal privilege and related codes of conduct.
• Excellent written communication and the ability to explain complex concepts to diverse audiences.
• Experience coaching or mentoring junior staff.

Required skills

• Data protection legislation (GDPR) knowledge
• Information security best practices
• Risk assessment and impact assessment techniques

What we offer

• Opportunity to influence data‑security strategy in a prestigious law firm.
• Collaborative environment with senior stakeholders.
• Professional development and mentoring responsibilities.