Senior Privacy Leader – AI Governance & Data Protection

Taylor Root; England; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading legal consultancy seeks a Senior Legal Counsel to lead the privacy function for a prominent UK business. This hands-on role involves setting direction, establishing frameworks, and managing privacy and compliance responsibilities, including AI governance. Candidates should have strong UK data protection law expertise and experience managing consumer data. You'll work collaboratively with teams across various regions and help modernize privacy frameworks in a dynamic, data-driven environment.

Qualifications

• Strong expertise in UK data protection law, EU experience is a plus.
• Experience working with significant volumes of consumer and/or employee data.
• Skill in building clear, usable policies and frameworks.

Responsibilities

• Lead the privacy function for the group.
• Manage policies, governance structures, and processes.
• Draft and negotiate data processing agreements.
• Support legal operations in multiple countries.
• Maintain the Code of Conduct.

Skills

UK data protection law expertise

B2C data handling experience

Policy development skills

Stakeholder influence

Solutions-focused approach

Job description

We’re hiring a Senior Legal Counsel who wants to take ownership of privacy in a large, consumer‑focused environment for a household UK name. This is a hands‑on role where you’ll set direction, build practical frameworks, and help the business navigate complex data issues as it evolves.

You’ll lead the privacy function for the group and manage a direct privacy report. The DPO title is held by an external law firm, and you’ll manage that relationship and act as the internal head of privacy.

Alongside privacy, you’ll cover a defined set of compliance responsibilities, with AI governance as a key area.

What the role involves

Most of your time will be on privacy. You’ll be the person teams come to for early advice, clear decisions, and steady guidance. You will:

• Build and maintain policies, governance structures and processes
• Lead on complex DPIAs, DSAR handling, incident response and lifecycle work such as ROPAs
• Draft and negotiate data processing and data‑sharing agreements
• Work with technology and product teams so privacy is built in from the start
• Support operations in Ireland, Germany and China where relevant
• Manage the relationship with the externally appointed DPO
• Lead and develop your direct privacy report

On compliance, the focus is governance rather than heavy operational work. You will:

• Maintain and communicate the Code of Conduct
• Support competition law awareness and training
• Own the anti‑bribery and corruption framework
• Lead AI governance: policy development, practical guidance, and horizon scanning
• Support the Head of Legal with reporting to the Audit & Risk Committee and periodic risk reviews

What you’ll bring

• Strong expertise in UK data protection law. EU experience is helpful but not required
• Experience working with significant volumes of consumer and/or employee data in a B2C context
• Skill in building clear, usable policies, frameworks and procedures
• Ability to give practical advice, make sound judgments and influence senior stakeholders
• High ownership, positive energy and a solutions‑focused approach

Why this may appeal

• You will lead the internal privacy function and shape how it operates for a FTSE 100
• There’s scope to modernise frameworks and bring clarity across a complex, data‑rich setting
• You’ll manage and develop a direct report
• AI governance is in focus and growing in importance