Data, AI & Security Lawyer

BT Group; Greater London; On-site; GBP 120,000 - 160,000; Full time

Benefits offered by this job

10% on target annual bonus

Private GP 24/7 for you and family

Carers leave

Pension scheme 5%+10%

Holiday purchase scheme

BT product discounts

Job summary

BT Group is seeking an experienced data privacy and cybersecurity lawyer to join Corporate Functions (Data, AI and Security Legal). The role spans BT’s CFUs and CUs, advising the Principal Lawyer and Legal Director on complex data issues, including security, AI ethics, human rights and commercial matters, while helping BT process data lawfully and ethically.

You will provide timely legal advice, draft and negotiate data protection provisions, manage external Counsel, conduct DPIAs and PIAs, and

Qualifications

• Post-qualification experience in data privacy and/or cybersecurity.
• Ability to give clear, practical legal advice with senior stakeholder influence.
• Strong commercial awareness and problem-solving in a fast-paced environment.
• Willingness to obtain UK government Developed Vetting clearance.

Responsibilities

• Advise on legal issues in data protection, cybersecurity and investigatory powers for BT.
• Provide timely legal advice aligned with BT’s strategy and acts as a single point of contact for a topic.
• Suggest strategic input on new BT products to meet data protection and security objectives.
• Advise on implications of upcoming legislative changes and codes of practice.
• Use data and AI to drive internal business change and innovation.
• Ensure policy updates are reflected across CFUs due to legislation shifts.
• Instruct and manage external Counsel as needed.
• Draft and negotiate complex security and data protection provisions in agreements.
• Contribute to pan-BT projects transforming cybersecurity and data systems.

Skills

Data privacy

Cybersecurity

Legal advisory

Stakeholder management

Regulatory understanding

Tools

DPIA tooling

Job description

Closing Date: 28th August

Location: London, at least 3 days a week onsite.

About the role

• This role sits within Corporate Functions (Data, AI and Security Legal) and flexes across a number of BT’s Customer-Facing Units (CFUs)/Corporate Units (CUs), assisting the Principal Lawyer and Legal Director, Data, AI and Security on complex and interesting data issues – security, cyber, AI, ethics, human rights and commercial matters.
• You will provide clear, responsive and strategically savvy advice that helps BT process data lawfully and ethically, protects the trust of our customers and colleagues, safeguards BT’s corporate reputation and enables BT to achieve its commercial goals.
• By horizon scanning for emerging legal issues and embedding Security and Privacy by Design, you help BT use data in smarter ways – supporting innovation, transformation and the delivery of brilliant products and services for our customers.

Because of the nature of the role, either existing UK Government Developed Vetting clearance or eligibility and a willingness to apply for such clearance is required.

What you’ll be doing

• Advising on legal issues in relation to data protection, cybersecurity and investigatory powers, and related issues impacting BT.
• Providing accurate and timely legal advice, analysis and support based on a combined understanding of BT’s commercial strategy and the legal environment, acting as a single point of contact for an assigned topic or area of the business where relevant.
• Providing strategic input on BT’s new products and services to ensure data protection, security and strategy objectives are met and implemented across the Group.
• Advising on the implications of upcoming legislative changes and statutory codes of practice.
• Using data and AI to drive internal business change and innovation.
• Ensuring in-life policy changes and updates to precedents brought about by changes to cybersecurity and data protection legislation are incorporated and understood across CFUs in BT.
• Instructing and managing external Counsel in line with agreed scope and budget, where appropriate.
• Drafting and negotiating complex security and data protection provisions in supplier, customer and partner agreements.
• Working on pan-BT projects aimed at transformation or remediation of cybersecurity and data systems and processes.
• Advising and partnering directly with business stakeholders.
• Conducting complex escalated Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).

Essential Skills / Experience

• An excellent technical lawyer with post-qualification experience in data privacy and/or cybersecurity – whether in-house (ideally in a highly regulated, consumer-focused sector such as banking or telecoms) or at a top-tier firm (NQ+ considered for the right candidate) – with in-depth understanding of the DPA 2018, GDPR and PECR, and national and European data protection laws and practices.
• Able to give clear, concise and practical legal advice with a high degree of professionalism, combined with strong stakeholder management and influencing skills to communicate effectively at the most senior levels of the organisation.
• Strong commercial awareness of the business’s value drivers, creative problem-solving, and the ability to plan, organise and prioritise tasks while remaining calm and controlled in a fast-paced, pressurised environment.
• Eligible and willing to obtain UK government Developed Vetting clearance, and a strong, supportive team player – we have a lovely, supportive team vibe and are delighted to be able to welcome new talent; bring yourself, just as you are.

Desirable Skills / Experience

• Experience advising on national and European security legislation, for example the Telecommunications (Security) Act 2021, Network and Information Systems Regulations 2018, NIS 2 and the EU Digital Operational Resilience Act (DORA).
• Awareness of the requirements of investigatory powers legislation such as the Investigatory Powers Act 2016
• Experience advising on the legal aspects of data and security incident response.
• CIPP/E, CIPM, AIGP certification or equivalent.
• Existing UK government Developed Vetting clearance.

Our Package

Tailored benefits make a real difference. That’s why we offer a comprehensive range to support your growth, wellbeing, and everyday life. You can design the package to suit you and your lifestyle. Your core benefits include:

• 10% on target annual bonus
• Access to an online private GP 24/7 for you and your immediate family
• Market-leading paid carers leave with up to 2 weeks off
• Equalised maternity, paternity, and adoption leave – 18 weeks’ full pay and 8 weeks’ half pay
• Discounted EE and BT products, including mobile and broadband
• Market leading Pension scheme – 5% from you and 10% from us
• Holiday purchase scheme

You can select additional benefits, including healthcare, dental, gym memberships and more when you’re ready.

BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.

BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.

Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.

We have a singular culture that unites all our people: we are customer-first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.