Senior Associate - Cyber

Clyde & Co; Glasgow; On-site; GBP 85,000 - 120,000; Full time

Job summary

Clyde & Co is seeking a Senior Associate for its Cyber Practice in the UK. The role focuses on advising on Readiness, Respond and Recover phases across data protection, technology and media disputes with exposure to multi-jurisdictional cyber incidents.

Applicants should have strong litigation credentials, a passion for technology and data issues, and a minimum of 5 PQE. The role supports growth across global cyber matters and client opportunities within a leading firm.

Qualifications

• Strong litigation experience with technology/media disputes beneficial.
• Experience handling breach response and cyber risk matters.
• Solid understanding of data protection regulatory frameworks.
• Demonstrates initiative and ability to manage multiple cyber-related matters.

Responsibilities

• Collaborate with partners advising on Readiness, Respond and Recover in cross‑jurisdictional incidents.
• Handle data protection, technology and media litigation matters.
• Coordinate cyber incident response including forensics, communications and regulator notifications.
• Manage group litigation and other disputes arising from security incidents.
• Support business development and raise the firm’s profile in cyber risk.

Skills

Litigation experience

Cyber breach response

Data protection knowledge

Take initiative

PQE 5+

Education

2:1 honours degree

Legal Practice Course

Graduate Diploma in Law

A Levels

Job description

Department: Cyber Practice - Insurance, Financial, Insurance and Professional Disputes

Location: London / Manchester / Bristol / Glasgow

Role: Senior Associate

The Practice

With multi-jurisdictional experience aligned to the far-reaching international exposure of cyberattacks and data breaches, our global team provides practical, commercial and tailored advice to our clients facing threats in this area.

Cyber liability is among the most complex risks challenging companies today. We manage the full lifecycle of cyber risks for clients through the Readiness, Respond and Recover phases.

We are one of the first and only law firms to specialise in manging cyber risk and have worked on over 6,000 data breaches since 2005, ranging from SME business email compromise events to some of the largest and most complicated multi-jurisdictional security incidents to date involving 200+ global jurisdictions.

We provide a range of pre-breach (Readiness) services including cyber simulations. We advise corporate clients, insurers and their insureds in evaluating data breaches and cyber exposures, regularly assist in organising immediate and effective responses to suspected breaches and cyber threats (Respond). This includes negotiating with attackers, managing forensics investigations, undertaking data mining, notifying regulators, implementing notification programmes and dealing with law enforcement and government authorities. We also advise on post-notification requests, complaints and claims including class action based litigation alongside regulatory investigations including launching enforcement challenges and appeals (Recover).

Our cyber practice and the work we undertake is global. The matters we work on are fast-moving and dynamic in nature. They involve working with international clients, leading cyber market experts, key law enforcement and government bodies, well-known threat groups and cutting-edge technologies.

Recent assignments include global breaches for technology companies, multi-million ransomware events for retailers including full PCI-PFI investigations, cross-border incidents for financial services companies with scores of regulators and group litigation following breaches for a number of clients. The practice is growing rapidly which had led to this latest role and opportunity. The team is collegiate, supportive and friendly.

Key Responsibilities

• The role is to work with partners who advise clients on a wide range of cyber risk matters including on the Readiness, Respond and Recover phases. They work closely with the global cyber team on cross-jurisdictional incidents and have significant experience dealing with data protection regulators, including coordinating EU wide regulatory investigations from the UK.
• Working on a range of data protection, technology and media litigation matters.
• Manging cyber security incidents including initiating and leading CMT calls, dealing with attackers, instructing IT forensics firms, engaging PR consultants, advising on notification obligations; managing regulatory investigations (e.g. ICO, FCA, SRA, etc) and notifying and liaising with criminal authorities.
• Dealing with litigation connected to cyber matters including defending group litigation and representative actions initiated following incidents; and managing other disputes arising out of security incidents.
• GDPR applicability - advising on the application of GDPR (Article 3) on international breaches.
• Assisting with business development initiatives for the cyber practice including developing corporate and cyber insurer client opportunities and relationships.
• Developing a strong personal reputation and further strengthening the firm's profile in the cyber market.
• Building relationships with third parties including vendors, brokers and other key intermediaries.
• Supporting and leading various thought leadership and broader PR initiatives.

Essential Skills & Experience

• Display excellent technical legal skills including drafting and strategy management, as well as managing and prioritising a full and varied caseload.
• Strong litigation experience, ideally including some technology and/or media disputes experience.
• Previous cyber experience with a focus on breach response work.
• An individual who is passionate, driven, determined, with a real interest in technology and data issues, who is able to take the initiative on all aspects of cyber work.
• We are ideally looking for a candidate who has a minimum of 5 PQE. Please note that our PQE levels are a guide and all suitable candidates will be considered.
• The solicitors act 1974 requires practicing solicitors to have a practicing certificate.
• Successful completion of a Training Contract (or equivalent) and relevant education (Legal Practice Course; Graduate Diploma in Law (if non-Law Graduate); 2:1 honours degree or equivalent; A Levels).

The Firm

When you work at Clyde & Co, you join a team of 500 partners, 2,400 lawyers, 3,200 legal professionals and 5,500 people in nearly 70 offices and associated offices worldwide. Our values are the principles that guide the decisions we make, unite us in our endeavours and strengthen our delivery, for both our clients and our firm. We work as one, excel with clients, celebrate difference and act boldly. We are committed to operating in a responsible way by progressing towards a diverse and inclusive workforce that reflects the communities and clients it serves. We are devoted to providing an environment in which everyone can realise their potential, using its legal and professional skills to support its communities. We do this through pro bono work, volunteering and charitable partnerships, and minimising the impact it has on the environment, including through our commitment to the SBTi Net-Zero standard and the setting of ambitious emissions reduction targets.

Our Commitment

Clyde & Co is proud to be an equal opportunities employer. Our values encourage us to support fairness, celebrate diversity and prohibit all forms of discrimination in the workplace to allow everyone to excel at work. Therefore, we welcome and encourage all applications from suitably qualified individuals, regardless of background or identity. Learn more about our interview process.

A Note on Privacy

Please take a moment to read our privacy notice. This describes what personal information Clyde & Co (we) may hold about you, what it’s used for, how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting a candidate as a Recruitment Agency Partner, it is an essential requirement and your responsibility to ensure that candidates applying to Clyde & Co are aware of this privacy notice.

This is the job description as constituted at present; however, Clyde & Co reserves the right to reasonably amend it in accordance with the changing needs of the business.