Senior Privacy Counsel

Neko Health; London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A leading health-tech company is seeking a Senior Privacy Counsel to lead their global privacy program. This role requires expertise in GDPR compliance and collaboration with cross-functional teams to integrate privacy considerations into new technologies. The ideal candidate will have over 10 years of legal experience and a Master of Laws degree, with strong analytical and communication skills. Join a dynamic team focused on innovative healthcare solutions.

Qualifications

• 10+ years of legal experience, preferably in a tech-focused legal team.
• Proven experience in GDPR and UK GDPR compliance.

Responsibilities

• Develop and own a global privacy and data protection strategy.
• Act as the organisation’s Data Protection Officer (DPO).
• Provide legal advisory on privacy and data protection.

Skills

Analytical skills

Communication

Negotiation

Education

Master of Laws (LL.M.)

Job description

Neko Health is a Swedish health-tech company co-founded in 2018 by Hjalmar Nilsonne and Daniel Ek. Our vision is to create a healthcare system that can help people stay healthy through preventive measures and early detection. Neko has developed a new medical scanning technology concept to make it possible to do broad and non-invasive health data collection that is both convenient and affordable for the public. This requires completely reimagining the healthcare experience and incorporating the latest advances in sensors and AI. We are a remote first company with headquarters in Stockholm and over 200 employees across Europe.

About the job

Location: Stockholm, Sweden or London, UK

Reporting to: General Counsel

We are seeking a dynamic and experienced Senior Privacy Counsel to join our legal team and take the lead on our global privacy and data protection program. This role will act as our Data Protection Officer and drive compliance with complex privacy regulations, including GDPR and UK GDPR, while enabling our ambitious international expansion. You will champion privacy-by-design, safeguard patient data, and support innovation at the intersection of law, technology and preventative healthcare.

Responsibilities:

• Privacy Strategy & Leadership: Develop and own a forward-thinking global privacy and data protection strategy that positions privacy as a business enabler and ensures compliance with GDPR, UK GDPR, US and emerging global privacy laws as we enter new markets.
• Legal Advisory: Provide expert, practical advice on privacy and data protection to engineering, clinical, regulatory, and commercial teams, helping embed privacy-by-design in new products and technologies.
• Collaboration: Work closely with cross-functional teams to inform strategy and facilitate business objectives, ensuring privacy considerations are integrated in planning and decision making.
• Compliance & Governance: Strengthen and expand the global privacy program, including privacy operations, data protection impact assessments, records of processing activities, and policy enforcement. Draft and update privacy notices, terms of service, and data protection agreements ensuring alignment with local privacy standards.
• Statutory DPO Duties: Act as the organisation’s DPO, advising senior leadership on complex data protection issues, managing regulatory engagements, and responding to third party requests and inquiries.
• Risk Management: Identify, assess, and mitigate privacy and data protection risks across operations, technology, and global expansion. Support incident response and data breach management in collaboration with senior leaders and the IT & Security team.
• Training & Awareness: Design and deliver privacy training programs to foster a culture of compliance and awareness across the organization.

Requirements:

• Education: Master of Laws (LL.M.) or equivalent legal degree in Sweden or UK. IAPP certifications (e.g., CIPP/E, CIPM) a plus but not prerequisite.

Experience:

• Qualified lawyer with 10 plus years of relevant legal experience, preferably in a leading Swedish or UK law firm and within a tech-focused in-house legal team.
• Proven experience in GDPR, UK GDPR, and other global privacy frameworks (e.g., CCPA).
• Experience acting as or supporting a DPO and handling regulatory engagements is highly desirable.

Skills:

• Exceptional knowledge of global privacy laws and their application to technology.
• Strong drafting, negotiation, and analytical skills, with the ability to produce clear, concise documentation free of legal jargon.
• Excellent communication skills in English (proficiency in Swedish a plus).
• Ability to work independently, manage multiple priorities, and provide risk-based, business-oriented advice in a fast-paced environment.

Attributes:

• Pragmatic and commercially minded, with a passion for balancing compliance with innovation.
• Collaborative and persuasive, with outstanding interpersonal skills to engage senior leadership, cross-functional teams, and regulators.
• Proactive and strategic, with the ability to anticipate and address privacy challenges before they arise.

Why Join Us?

Impact: Shape the real estate strategy for a pioneering healthcare tech company with global reach.

Growth: Career advancement within a rapidly expanding legal team and international business.

Innovation: Work with cutting-edge technology and AI in a supportive, collaborative culture

We offer a dynamic work environment with a high degree of autonomy that fosters growth and development. If you are passionate about building a better healthcare system for everyone and you thrive in a fast-paced environment, we would love to hear from you!

Please note: we perform background and reference checks as part of our interview process.