Senior Data Protection Specialist

Short Description

Function: General Counsel  

Reports to: Global Data Protection Director 

Set up: hybrid

Location: London, UK

Why we need this role

The Senior Data Protection Specialist provides senior-level legal and practical advice on UK GDPR, EU GDPR and international privacy requirements, including Colt's Binding Corporate Rules. The role supports the delivery of the global Data Protection Programme, AI and digitalisation initiatives, regulatory projects and privacy-by-design across the business.

The role reports directly to the Global Data Protection Director. It is a senior individual-contributor role with responsibility for leading assigned matters and delivering high-quality work. The successful candidate will be comfortable working in an environment characterised by evolving business priorities and a broad variety of data protection matters across multiple jurisdictions. The role requires close alignment with the team, the Director and the global Data Protection framework, while contributing proactively to the overall success of the function.

What you will do

• Provide expert, pragmatic and regulator-defensible advice on UK GDPR, EU GDPR, and international privacy laws.
• Lead and deliver DPIAs, TIAs, privacy risk assessments and privacy-by-design reviews for complex projects.
• Draft, review and negotiate data processing agreements, international transfer mechanisms, and related governance documents.
• Advise Product, Technology, Security, Procurement, HR, Sales and Legal stakeholders on privacy requirements and practical solutions.
• Support AI tools, automation, digital transformation and customer-facing AI initiatives from a privacy and governance perspective.
• Lead and manage vendor privacy assessments.
• Support the digitalisation of Data Protection processes and tools.
• Support data incident investigations, breach assessments, remediation and preparation of regulatory documentation.
• Support audits, regulatory projects, training and continuous improvement of policies, procedures, templates and controls.
• Developing and delivering training programs to educate employees about data protection principles, policies, and best practices.
• Provide Data Protection advice and governance oversight on Data Subject Access Requests (DSARs), supporting the business in meeting its obligations while maintaining appropriate accountability within the relevant functions.
• Monitor relevant regulatory developments and recommend appropriate implementation actions.
• Strong team player, with a collaborative, supportive and constructive working style with the team.

What we look for

• 7-10 years of relevant professional experience in data protection, privacy law or regulatory compliance, including work in an international environment.
• Strong practical knowledge of UK GDPR, EU GDPR, international transfers and complex multi-jurisdictional privacy matters.
• Proven experience leading DPIAs, TIAs, privacy-by-design reviews, vendor assessments and complex stakeholder advice.
• Experience with technology, digitalisation, AI governance, product privacy or processor services.
• Excellent drafting, analysis, negotiation, communication and problem-solving skills.
• Fluent written and spoken English. An additional European language is desirable.
• A legal qualification or equivalent senior privacy experience. CIPP/E, CIPM, AIGP or an equivalent certification is strongly desirable.
• Strong team player, with a collaborative, supportive and constructive working style.
• High level of personal accountability, ownership and follow-through on assigned workstreams.
• Ability to proactively drive progress, coordinate stakeholders and move matters forward without requiring constant day-to-day direction.
• Ability to prepare clear, practical and well-structured recommendations for decision-making.
• Ability to manage competing priorities, tight deadlines and significant workloads while maintaining accuracy and professional standards.
• Strong communication skills, including the ability to engage effectively with senior stakeholders.
• Practical problem-solving mindset, with the ability to propose workable solutions rather than simply identify issues.
• Strong drafting skills and ability to produce clear, regulator-ready documentation, recommendations, records and governance materials.

Skills

Education