Data Privacy Lawyer

AO Shearman; Bangor; On-site; GBP 90,000 - 120,000; Full time

Job summary

AO Shearman's Belfast office is seeking a Senior In-House Lawyer to join the Data Privacy Risk team, focusing on AI, privacy and information security. The role requires 5+ years PQE and in-house or risk-management experience.

You will partner with senior leadership to implement AI governance, data protection programmes and cross‑border compliance, while training staff and aligning with regulatory requirements.

Qualifications

• Qualified lawyer with at least 5 years PQE advising AI, privacy, and security issues.
• Experience in risk management or in-house teams.
• Experience with international corporate or professional services environment.
• Strong communication with diverse stakeholders.

Responsibilities

• Develop and maintain AI governance and risk management programme.
• Provide risk management advice on AI strategy and deployment.
• Assist in managing global privacy framework.
• Advise colleagues on privacy, information security and AI issues.
• Develop and deliver training and communications.
• Create and maintain records, policies, and pro‑forma documentation.
• Support junior team members' development.
• Support Chief Privacy Officer and Deputy Chief Privacy Officer.

Skills

AI

Data privacy

Information security

Risk management

In-house counsel

Regulatory compliance

Education

Qualified lawyer (UK)

Tools

Microsoft Office

eDiscovery

Job description

We have an exciting opportunity for a Senior In-House Lawyer: AI & Data Privacy to join our Data Privacy Risk team, based in A&O Shearman's Belfast Office.

Data Privacy Risk team - Belfast

A&O Shearman's Risk function, led by partner Simon Fuge, is comprised of teams of market-leading experts and is at the heart of the sustainability and success of our firm. It has a core responsibility to uphold the values of A&O Shearman and support the strategic objectives of the business. Our lawyers and industry experts provide high quality legal and risk advice to the global firm, its senior management, governance bodies and partners.

The mission of the Data Privacy Team is to foster a strong culture of compliance throughout A&O Shearman while providing pragmatic and business‑focussed advice in a number of highly regulated areas. The Data Privacy Team advises on AI, data privacy, data governance and information security issues affecting A&O Shearman, including:

• The creation and maintenance of the firm's global AI governance framework
• Advising on the firm's AI strategy and internal deployment
• The legal aspects of information security and data management to meet legal and regulatory requirements
• Incident readiness, response and remediation
• Working closely with fee earners, IT and others on technology and data innovations to ensure privacy and information security by design
• The creation and maintenance of a global programme of measures and documentation designed to ensure ongoing compliance with privacy laws globally
• Data export restrictions and data localisation requirements with a view to preserving international data
• flowsDevising and delivering the firm's privacy training programmes
• Advising on, and ensuring compliance with, applicable regulatory reporting requirements

What you will do

A&O Shearman is seeking an experienced professional to join the firm's global Data Privacy Team. As a senior member of the team, you will directly support the firm's Chief Privacy Officer and Deputy Chief Privacy Officer, taking on a dynamic, fast‑paced, and challenging role. This position is ideal for a lawyer with at least 5 years PQE and a proven track record working in risk management or in‑house legal teams.

The key aspects of the role will be:

• Working with the Chief Privacy Officer to develop and maintain the firm's market‑leading AI governance and risk management programme
• Providing risk management advice and support on the firm's AI strategy and internal deployment
• Assisting in the management, support and maintenance of the firm's global privacy framework
• Working closely with a range of stakeholders on technology and data innovations to help ensure good data handling practices and privacy by design
• Responding to and advising on individual rights requests
• Providing advice and support on data incident response
• Advising and guiding colleagues across the firm on privacy, information security and AI issues, policies and best practice
• Developing and delivering training and communication plans
• Creating and maintaining records, policies, guidance, and pro‑forma documentation
• Helping manage and support junior members of the team in their professional development
• Supporting all aspects of the Chief Privacy Officer and Deputy Chief Privacy Officer's work

What you will have

The ideal candidate will be able to demonstrate the following skills and experience: a qualified lawyer with at least 5 years PQE advising on a wide range of business stakeholders on AI, privacy, information security, and data handling issues extensive experience in providing directive and pragmatic advice in a commercial contextexperience of working in an international corporate or professional services environmentexperience of dealing with and advising a wide range of business stakeholders in determining requirements and priorities, as well as resolving issuesan enthusiasm for technology and innovation, and the ability to understand, explain and advise on technical processes using business‑friendly languageexcellent IT skills (Microsoft Office suite of applications and other software, such as eDiscovery or other specialist software)a proven ability to work independently and proactively and to manage and prioritise a busy workloadself‑motivation and the ability to manage new and varied challengesexcellent written and verbal communication skillsexcellent attention to detaila collaborative approach and the ability to work well in a small team and with a wide range of business stakeholders

Desirable

experience of managing global business change projects a relevant certified qualification such as CIPP/AIGP, CIPP/E or CIPMexperience of working in a risk function or equivalent