Legal Director

Leonid Group Ltd; Greater London; Hybrid; GBP 140,000 - 210,000; Full time

Benefits offered by this job

Remote/Hybrid work

International travel

Job summary

Leonid Group, a high-growth multinational digital Healthcare business, seeks an experienced Legal Director, Privacy & Digital Regulation to lead group-wide privacy and data protection strategy. You will shape regulatory roadmap and advise on AI governance while ensuring compliance across regions.

Reporting to the Chief Legal & Risk Officer, you will build and develop the privacy team, partner with Product, Technology and Risk functions, and engage with regulators on complex issues including

Qualifications

• 10+ years in privacy, data protection and digital regulation.
• Strong background in GDPR and EU digital acts.
• Proven leadership of legal/privacy teams.
• Experience advising senior executives and boards on regulatory matters.

Responsibilities

• Lead group-wide privacy and data protection program.
• Define and execute regulatory strategy and AI governance.
• Engage with regulators and oversee investigations.
• Advise on commercial and risk issues at C-suite/board level.
• Lead and develop the privacy team across regions.

Skills

Privacy law

Data protection

Digital regulation

GDPR

AI governance

Regulatory strategy

Leadership

Board advisory

Education

Legal qualification

Job description

This role is open to locations in wider Europe such as Spain, Poland and the Netherlands.

A high-growth multinational digital Healthcare business are currently seeking an experienced Legal Director, Privacy & Digital Regulation to lead its group-wide privacy, data protection and digital regulation strategy. As the world’s largest healthcare platform, each month, they connect over 24 million patients with 280,000 doctors across 13 countries. Their marketplaces, SaaS and AI tools simplify daily tasks and help doctors, clinics and hospitals work more efficiently, so they can focus on what really matters: caring for their patients.

Reporting to the Chief Legal & Risk Officer, you will take ownership of the group's privacy and digital regulation agenda, working closely with senior leadership and teams across Product, Technology, Data, Information Security and Risk. You will play a key role in shaping the organisation’s approach to evolving regulatory requirements, ensuring the business can continue to innovate, develop new products and adopt AI responsibly while maintaining strong compliance standards.

This is a senior leadership position offering significant strategic influence and visibility across the business. From setting the group's privacy and regulatory roadmap to overseeing AI governance, managing relationships with regulators and advising on complex commercial and strategic decisions, you'll have the opportunity to shape how privacy and digital regulation are managed across an international organisation. You'll also lead and develop the existing team, helping build a scalable and effective function as the business continues to grow.

What’s on offer?

This is an excellent opportunity to take ownership of a group-wide privacy and digital regulation function within an innovative international healthtech business. You'll have significant exposure to executive leadership and board-level discussions, with the opportunity to influence business strategy, product development and the organisation's approach to emerging digital regulation.

The role offers a particularly interesting mix of established privacy and data protection responsibilities alongside newer and evolving regulatory frameworks, including the EU AI Act, Digital Services Act, Data Act and European Health Data Space Regulation. You'll also play a central role in shaping the organisation's AI governance framework, supporting strategic partnerships and M&A activity, and developing the team's operating model as the business scales.

The position offers remote or hybrid working, alongside international travel to relevant business locations, primarily across Europe and Latin America, initially expected to be around 20%.

About you

To be successful in this role, you will have a legal qualification and around 10+ years' post-qualification experience specialising in privacy, data protection and digital regulation, gained within a leading law firm and/or an international in-house environment. You'll have deep expertise in GDPR and a strong understanding of the evolving European digital regulatory landscape, ideally including the EU AI Act, DSA, Data Act and EHDS.

You'll have a proven track record of leading and developing legal or privacy teams, alongside experience advising senior executives and board-level stakeholders on complex regulatory and commercial matters. Direct experience engaging with data protection authorities, managing investigations or significant data incidents, and leading privacy workstreams in M&A transactions will also be important.

The successful candidate will be commercially minded and pragmatic, with the confidence to influence senior stakeholders and translate complex regulatory requirements into clear, practical business advice. You'll be comfortable operating at a strategic level while ensuring the function has the right people, processes and technology in place to deliver effectively.

Fluency in English is essential, with additional European languages such as Spanish, Portuguese, Polish, Italian, Turkish or German considered advantageous. Professional certifications such as CIPP/E, CIPM or AIGP would also be welcomed.