Data Protection Manager

AJ FOX COMPLIANCE; Greater London; On-site; GBP 75,000 - 110,000; Full time

Job summary

AJ FOX COMPLIANCE in London seeks an experienced Data Protection Manager/Lawyer to support data protection, regulatory compliance and risk management across the firm, with a focus on governance for AI and privacy matters.

The role reports to the Director of Regulatory Compliance and Data Protection Officer and requires leadership in driving a comprehensive privacy programme, handling data breaches, DPIAs and international transfers while advising on supplier agreements and safeguarding client

Qualifications

• Experienced data protection lawyer or privacy professional with managerial-level experience driving an organisational data protection programme.
• Strong expertise in data breaches, subject rights requests, privacy risk assessments, contracts and regulatory compliance.

Responsibilities

• Support the Data Protection Officer in delivering the firm’s data protection strategy and compliance programme.
• Maintain records of processing activities, data inventories, registers, policies, notices and procedures.
• Manage data breaches, incidents, subject rights requests and regulatory risk assessments.
• Monitor compliance, testing controls, identifying gaps, tracking improvement actions and reporting to governance bodies.
• Advise on data minimisation, retention, secure deletion and UK GDPR / Data Protection Act 2018 requirements.
• Review DPIAs, LIAs, international transfers, appropriate safeguards and Transfer Risk Assessments.
• Advise on supplier due diligence, contracts, data processing arrangements and data sharing agreements.
• Deliver data protection training, guidance and compliance initiatives.
• Advise on the responsible use of AI and emerging technologies, including privacy/regulatory risks.
• Support AI governance, supplier assessments and control frameworks, including interaction between AI, data protection and SRA obligations.
• Support client engagement, regulatory matters, audits, reporting, complaints and wider compliance projects.

Skills

Data privacy leadership

Regulatory compliance

AI governance

Data breach management

DPIAs & LIAs

Data mapping

Contract reviews

Stakeholder management

Communication skills

Education

Law degree / privacy certification

Tools

DPIA tools

Job description

We are working with a leading UK litigation-only law firm to appoint a Data Protection Manager/Lawyer in London. Reporting to the Director of Regulatory Compliance and Data Protection Officer, you will support the firm’s data protection, regulatory compliance and risk management functions, with a particular focus on AI governance, confidentiality and professional conduct.

The firm is seeking an experienced data protection lawyer or privacy professional with managerial-level experience driving an organisational data protection programme. You will bring strong expertise in data breaches, subject rights requests, privacy risk assessments, contracts and regulatory compliance, alongside sound judgement, excellent communication skills and a proactive, pragmatic approach.

The responsibilities will include:

• Supporting the Data Protection Officer in delivering the firm’s data protection strategy and compliance programme.
• Maintaining records of processing activities, data inventories, registers, policies, notices and procedures.
• Managing data breaches, incidents, subject rights requests and regulatory risk assessments.
• Monitoring compliance, testing controls, identifying gaps, tracking improvement actions and reporting to relevant governance bodies.
• Advising on data minimisation, retention, secure deletion and UK GDPR and Data Protection Act 2018 requirements.
• Reviewing DPIAs, LIAs, international transfers, appropriate safeguards and Transfer Risk Assessments.
• Advising on supplier due diligence, commercial contracts, data processing arrangements and data sharing agreements.
• Delivering data protection training, guidance and compliance improvement initiatives.
• Advising on the responsible use of AI and emerging technologies, including related privacy, confidentiality and regulatory risks.
• Supporting AI governance, supplier assessments and control frameworks, including the interaction between AI, data protection and SRA obligations.
• Supporting client engagement, regulatory matters, audits, reporting, complaints, training and wider compliance projects.

This is an excellent opportunity to develop a broad data protection and AI governance practice within a highly respected law firm, working closely with senior stakeholders.