Privacy & Data Protection Counsel for AI & Cybersecurity

Larson Maddox; Greater London; On-site; GBP 110,000 - 170,000; Full time

Job summary

Larson Maddox is seeking an Assistant General Counsel to join its privacy and data protection legal team in London or Dublin. The role sits at the intersection of regulation, technology, cybersecurity and commercial contracting.

You will advise on UK GDPR, EU GDPR, data transfers, vendor risk, and AI regulation, draft agreements and lead privacy impact assessments, with broad exposure across Europe and global jurisdictions.

Qualifications

• Qualified solicitor in England & Wales or Ireland.
• 4–12 years' post-qualification experience with privacy matters.
• Experience drafting and negotiating commercial agreements with privacy provisions.
• Strong knowledge of UK GDPR, EU GDPR, data transfers, vendor risk, and cybersecurity basics.
• Relevant privacy certifications (CIPP/E, CIPM) preferred but not required.

Responsibilities

• Advise on international privacy and data protection laws including UK GDPR, EU GDPR, ePrivacy, and other global privacy rules.
• Develop and maintain privacy and cybersecurity policies and procedures.
• Lead privacy impact assessments, legitimate interest assessments, and cross-border data transfer matters.
• Assist with incident and breach response with cross-functional teams.
• Draft, review, and negotiate data processing agreements, vendor contracts, and technology agreements.
• Provide guidance on privacy risk allocation in commercial negotiations.
• Monitor developments in privacy, cybersecurity, and AI regulation.
• Deliver privacy training and awareness programs.
• Engage with regulators, external advisers, and auditors.
• Support governance and prepare materials for senior management.

Skills

Privacy

Data protection

Commercial contracts

Regulatory compliance

Cross-border data transfers

Education

Qualified solicitor in England & Wales or Ireland

Job description

Larson Maddox is seeking an Assistant General Counsel to join its privacy and data protection legal team in London or Dublin. The role sits at the intersection of regulation, technology, cybersecurity and commercial contracting.

You will advise on UK GDPR, EU GDPR, data transfers, vendor risk, and AI regulation, draft agreements and lead privacy impact assessments, with broad exposure across Europe and global jurisdictions.