Remote Regulatory Lawyer for Privacy & Due Diligence

Flex Legal; Boston (MA); Hybrid; GBP 148.000 - 221.000; Vollzeit

Zusammenfassung

Flex Legal is seeking an experienced Regulatory Lawyer to provide interim support to a busy legal and compliance team through to the end of 2026. The role focuses on regulatory, privacy, and supplier due diligence work as the business moves toward year-end targets, including review of critical supplier contracts and due diligence documentation across acquired entities.

The ideal candidate will have strong regulatory experience, a background in privacy compliance, and a track record in supplier

Qualifikationen

• Must have demonstrated regulatory law experience.
• Strong knowledge of privacy and data protection compliance.
• Experience with supplier due diligence and contractual reviews is essential.
• Familiarity with NIS2 and Cyber Resilience Act is advantageous.

Aufgaben

• Advising on regulatory requirements including NIS2 and the Cyber Resilience Act.
• Support privacy compliance and data protection requirements.
• Conduct due diligence reviews of critical suppliers and their contractual documentation.
• Review supplier contracts and identify legal, privacy, security and regulatory gaps.
• Review Data Processing Agreements and identify areas needing attention.
• Review AI-related contractual terms and assess risks.
• Maintain and progress supplier due diligence in the tracking system.
• Support integration of recently acquired entities from regulatory perspective.
• Escalate key legal and regulatory risks to the wider team.

Kenntnisse

Regulatory law

Privacy compliance

Due diligence

Contract review

NIS2

Cyber Resilience Act

Data protection

Jobbeschreibung

Flex Legal is seeking an experienced Regulatory Lawyer to provide interim support to a busy legal and compliance team through to the end of 2026. The role focuses on regulatory, privacy, and supplier due diligence work as the business moves toward year-end targets, including review of critical supplier contracts and due diligence documentation across acquired entities.

The ideal candidate will have strong regulatory experience, a background in privacy compliance, and a track record in supplier