Regulatory Lawyer

Flex Legal; Boston (MA); Hybrid; GBP 148,000 - 221,000; Full time

Job summary

Flex Legal is seeking an experienced Regulatory Lawyer to provide interim support to a busy legal and compliance team through to the end of 2026. The role focuses on regulatory, privacy, and supplier due diligence work as the business moves toward year-end targets, including review of critical supplier contracts and due diligence documentation across acquired entities.

The ideal candidate will have strong regulatory experience, a background in privacy compliance, and a track record in supplier

Qualifications

• Must have demonstrated regulatory law experience.
• Strong knowledge of privacy and data protection compliance.
• Experience with supplier due diligence and contractual reviews is essential.
• Familiarity with NIS2 and Cyber Resilience Act is advantageous.

Responsibilities

• Advising on regulatory requirements including NIS2 and the Cyber Resilience Act.
• Support privacy compliance and data protection requirements.
• Conduct due diligence reviews of critical suppliers and their contractual documentation.
• Review supplier contracts and identify legal, privacy, security and regulatory gaps.
• Review Data Processing Agreements and identify areas needing attention.
• Review AI-related contractual terms and assess risks.
• Maintain and progress supplier due diligence in the tracking system.
• Support integration of recently acquired entities from regulatory perspective.
• Escalate key legal and regulatory risks to the wider team.

Skills

Regulatory law

Privacy compliance

Due diligence

Contract review

NIS2

Cyber Resilience Act

Data protection

Job description

We have an excellent opportunity with our client who is seeking an experienced Regulatory Lawyer to provide interim support to their busy legal and compliance team through to the end of the year.

The Role

The successful candidate will support the business with a range of regulatory, privacy and supplier due diligence work as the team works towards key year-end targets. A significant part of the role will involve reviewing critical supplier contracts and due diligence documentation across a growing group of acquired entities.

Core responsibilities include:

• Advising on regulatory requirements, including NIS2 and the Cyber Resilience Act
• Supporting privacy compliance and data protection requirements
• Conducting due diligence reviews of critical suppliers and their contractual documentation
• Reviewing supplier contracts and identifying legal, privacy, security and regulatory gaps
• Reviewing Data Processing Agreements and identifying areas requiring further attention
• Reviewing AI-related contractual terms and assessing associated risks
• Maintaining and progressing supplier due diligence through the team's existing tracking system
• Supporting the integration of recently acquired entities from a regulatory and compliance perspective
• Identifying and escalating key legal and regulatory risks to the wider team

Ideal Candidate Profile

• Experienced regulatory lawyer.
• Strong experience advising on regulatory and compliance requirements
• Previous experience with supplier due diligence and contractual reviews is essential
• Strong knowledge of privacy and data protection compliance
• Experience working with NIS2 and/or the Cyber Resilience Act would be highly advantageous
• Experience working within a heavily regulated environment
• Comfortable reviewing supplier contracts and identifying legal, privacy, security and regulatory gaps
• Able to work independently and manage a busy workload with limited supervision
• Practical and commercially minded approach with strong attention to detail
• Able to hit the ground running and provide immediate support to a busy team
• Contract length: Until Christmas 2026, with potential to extend subject to additional approval
• Start date: W/C 19 October 2026, ideally, with W/C 26 October possible for the right candidate
• Location: Fully remote
• Equipment: Not provided. Candidates will need to use their own equipment
• Reporting to: General Counsel, based in Boston
• Interview process: One-stage 30-minute Teams interview with GC