Legal Counsel, Privacy and Technology

Join us, be part of more.

We’re so much more than an energy company. We’re a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn’t rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities. Here, you can find more purpose, more passion, and more potential. That’s why working here is #MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it.

We have an exciting new opportunity for a Legal Counsel, Privacy and Technology to join our Legal, Regulatory Affairs, Ethics & Compliance, and Secretariat Function (LRECS). In this role, you will be an integral part of a high-performing privacy team, reporting directly to our Group Data Protection Officer (DPO). You will play a crucial role in achieving the privacy and technology objectives for Centrica Group and the broader legal function.

Your responsibilities will include managing daily privacy and associated technology risks and providing privacy services to the commercial and technology sectors of our business. Additionally, you will support a variety of legal tasks, including assisting our customer-facing business, British Gas, and overseeing the procurement of goods and services. You will also be required on occasion to deputise as DPO.

Location: We work flexibly in line with our Flexible First working arrangements believing that empowered colleagues are happier and more productive. The successful candidate will, however, need to be comfortable commuting to our Windsor office on a weekly basis and on some occasions, more frequently and also to our other locations as may be needed.

What will you do?

The role is a broad privacy position with a focus on balancing the need for clear and pragmatic privacy advice while ensuring compliance with the laws and regulations governing the supply of energy and services to consumers and businesses.

Key accountabilities will include:

• Deliver high quality, high impact, high value privacy support across the business with the right balance of risk awareness and pragmatism.
• Support the businesses in managing operational and regulatory risks, including the development and delivery of key policies, training and guidance to the business to better manage privacy and technology related risk.
• Support the Centrica DPO in fulfilling their legal responsibilities and also deputise on occasion.
• Advise and input on data protection clauses, transfer risk assessments, data protection impact assessments, maintenance of Article 30 Record of Processing Activities, customer rights requests, personal data breach risk assessment and reporting, cyber security obligations and artificial intelligence risk assessments.
• Advise, review and input into contracts from a privacy and technology perspective.
• Provide privacy advice to stakeholders on key business decisions, policy and customer journeys.
• Develop strong stakeholder relationships and networks within the function and the other business units to support the delivery of objectives and the management of risk.

Who are we looking for?

You will be a qualified Lawyer who can bring a strong working knowledge of GDPR, PECR, the EU Artificial Intelligence Act and Network and Information Security (NIS) requirements and a good understanding of other major privacy and cyber security frameworks.

Ideally with a privacy/technology certificate/qualification, the diverse nature of this role requires someone who can consistently demonstrate a highly flexible and inquisitive approach, not only in service delivery but also across various legal tasks. You should be adept at managing a wide range of internal and external stakeholders, prioritising effectively, and delivering high-quality, practical work.

The ideal candidate will possess a strong understanding of privacy, artificial intelligence, technology, and information security law both within the UK and Europe. Additionally, familiarity with the UK home energy management market would be beneficial.

It would be advantageous if you could also bring the following:

• Experience of delivering successfully in a challenging, fast paced environment, preferably in-house.
• Experience of drafting data protection clauses and inputting into contracts from a privacy perspective is required.
• A keen interest in the relationship between privacy and technological developments/innovation would be an advantage.
• Ability to express complex concepts in plain and simple language.
• Pragmatic and clear advice focussed on delivering solutions.
• Interpretation of and advice on regulatory and compliance requirements, balancing risk and commercial objectives.

Why should you apply?

We’re not a perfect place – but we’re a people place. Our priority is supporting all of the different realities our people face. Life is about so much more than work. We get it. That’s why we’ve designed our total rewards to give you the flexibility to choose what you need, when you need it, making sure that you and your family are supported not only financially, but physically and emotionally too. Visit the link below to discover why we’re a great place to work and what being part of more means for you.

https://www.morethanacareer.energy/centrica

If you're full of energy, fired up about sustainability, and ready to craft not only a better tomorrow, but a better you, then come and find your purpose in a team where your voice matters, your growth is non-negotiable, and your ambitions are our priority.

Help us, help you. We would love for you to share any information about yourself throughout our recruitment process so that we can better understand you and help shape your journey.