Senior Data Privacy & AI Governance Counsel

Fry & Brown; Greater London; On-site; GBP 110,000 - 160,000; Full time

Job summary

Fry & Brown, a well-established international insurance group, is seeking a Senior Data Protection Legal Counsel to lead its data protection function and advise senior stakeholders across underwriting, claims, operations, IT, information security and risk.

This role combines hands-on legal advisory work with leadership of the DP team, reporting to the Head of Legal and DPO, with deputising opportunities and responsibility for privacy governance, DPIAs, data transfers, and breach response.

Qualifications

• Qualified solicitor, barrister or equivalent legal professional with demonstrable PQE.
• Data Protection qualification preferred (CIPP/E, CIPM, CIPT or equivalent).
• Extensive knowledge of UK GDPR, PECR and related privacy laws.

Responsibilities

• Advising the business on its legal and regulatory obligations under UK GDPR and related privacy laws.
• Leading and managing the Data Protection team, with scope to deputise for the DPO.
• Advising on AI and privacy governance frameworks, including oversight of Data Privacy Impact Assessments.
• Overseeing international transfer risk assessments, data subject rights requests and breach management.
• Advising on data protection clauses in third‑party contracts, including international transfer mechanisms.
• Drafting board and committee reports and promoting GDPR awareness across the business.

Skills

DPO leadership

Privacy law

Stakeholder management

Education

Qualified solicitor or barrister

Job description

Fry & Brown, a well-established international insurance group, is seeking a Senior Data Protection Legal Counsel to lead its data protection function and advise senior stakeholders across underwriting, claims, operations, IT, information security and risk.

This role combines hands-on legal advisory work with leadership of the DP team, reporting to the Head of Legal and DPO, with deputising opportunities and responsibility for privacy governance, DPIAs, data transfers, and breach response.