Assistant General Counsel

Larson Maddox; Greater London; On-site; GBP 110,000 - 170,000; Full time

Job summary

Larson Maddox is seeking an Assistant General Counsel to join its privacy and data protection legal team in London or Dublin. The role sits at the intersection of regulation, technology, cybersecurity and commercial contracting.

You will advise on UK GDPR, EU GDPR, data transfers, vendor risk, and AI regulation, draft agreements and lead privacy impact assessments, with broad exposure across Europe and global jurisdictions.

Qualifications

• Qualified solicitor in England & Wales or Ireland.
• 4–12 years' post-qualification experience with privacy matters.
• Experience drafting and negotiating commercial agreements with privacy provisions.
• Strong knowledge of UK GDPR, EU GDPR, data transfers, vendor risk, and cybersecurity basics.
• Relevant privacy certifications (CIPP/E, CIPM) preferred but not required.

Responsibilities

• Advise on international privacy and data protection laws including UK GDPR, EU GDPR, ePrivacy, and other global privacy rules.
• Develop and maintain privacy and cybersecurity policies and procedures.
• Lead privacy impact assessments, legitimate interest assessments, and cross-border data transfer matters.
• Assist with incident and breach response with cross-functional teams.
• Draft, review, and negotiate data processing agreements, vendor contracts, and technology agreements.
• Provide guidance on privacy risk allocation in commercial negotiations.
• Monitor developments in privacy, cybersecurity, and AI regulation.
• Deliver privacy training and awareness programs.
• Engage with regulators, external advisers, and auditors.
• Support governance and prepare materials for senior management.

Skills

Privacy

Data protection

Commercial contracts

Regulatory compliance

Cross-border data transfers

Education

Qualified solicitor in England & Wales or Ireland

Job description

An established, internationally recognised financial services organisation is seeking an Assistant General Counsel to join its Legal team. This is an excellent opportunity for a privacy and data protection lawyer who enjoys working at the intersection of regulation, technology, cybersecurity, and commercial contracting.

The role offers broad exposure across Europe and other global jurisdictions, partnering closely with senior stakeholders across legal, compliance, technology, information security, and business functions.

The Opportunity

Reporting into a senior legal leadership team, you will play a key role in advising on privacy, data protection, cybersecurity, and AI-related legal issues. You will support the development and enhancement of privacy frameworks, advise on regulatory matters, negotiate commercial agreements, and help manage data protection risks across the business.

This opportunity will be based in London or Dublin.

Key Responsibilities

• Advise on international privacy and data protection laws, including UK GDPR, EU GDPR, ePrivacy requirements, and other global privacy regulations.
• Support the development, implementation, and ongoing maintenance of privacy and cybersecurity policies and procedures.
• Lead and advise on privacy impact assessments, legitimate interest assessments, third-party due diligence, and cross-border data transfer matters.
• Assist with incident and breach response alongside legal, compliance, technology, and information security teams.
• Draft, review, and negotiate a range of commercial agreements, including data processing agreements, vendor contracts, technology agreements, and client-facing contracts.
• Provide pragmatic advice on privacy risk allocation and compliance within commercial negotiations.
• Monitor developments in privacy, cybersecurity, and artificial intelligence regulation, providing guidance to stakeholders on emerging risks and requirements.
• Deliver privacy training and awareness initiatives across the organisation.
• Engage with regulators, external advisers, and auditors where required.
• Support governance activities and prepare materials for senior management and committees.

Required Qualifications

• Qualified solicitor in England & Wales or Ireland.
• Approximately 4-12 years' post-qualification experience with significant exposure to privacy and data protection matters.
• Strong experience drafting and negotiating commercial agreements with privacy-related provisions.
• Deep understanding of UK and EU GDPR, international data transfers, vendor risk, and cybersecurity fundamentals.
• Relevant privacy certifications (such as CIPP/E, CIPM, or similar) are preferred but not required.