- Company Name
- Pembury Legal
- Job Title
- Deputy Chief Privacy Officer - Elite Global Law Firm
- Job Description
-
Job Title: Deputy Chief Privacy Officer
Role Summary:
Seasoned legal professional tasked with leading the firm’s global data privacy and governance program, integrating strategy with day‑to‑day operational leadership to ensure compliance, incident management, and cultural accountability.
Expectations:
- Influence senior leadership on privacy strategy across 30+ jurisdictions.
- Deliver measurable privacy outcomes, regulatory compliance, and incident response excellence.
- Mentor and grow a distributed privacy team.
- Drive cross‑functional collaboration with IT, risk, and compliance units.
Key Responsibilities:
- Support the Chief Privacy Officer in developing and evolving the global privacy framework.
- Lead incident response, compliance reporting, and remediation initiatives.
- Partner with the Chief Information Security Officer on cybersecurity and data resilience.
- Advise on privacy, data governance, and cross‑border transfer regulations.
- Oversee privacy record‑keeping, reporting, and regulator/ client engagement.
- Design and execute privacy awareness and training programs firm‑wide.
- Align privacy objectives with business strategy alongside risk, technology, and compliance teams.
- Manage, coach, and develop privacy professionals.
Required Skills:
- Deep legal expertise in global privacy law (GDPR, CCPA, PIPEDA, etc.).
- Proven incident response and regulatory reporting experience.
- Strong stakeholder management and influence at senior levels.
- Leadership and team‑management abilities.
- Excellent written and verbal communication.
- Strategic mindset with operational execution capability.
- Knowledge of AI, cyber‑security, and data‑resilience concepts.
- Results‑orientated, proactive, and collaborative approach.
Required Education & Certifications:
- Qualified lawyer (solicitor, attorney, or equivalent, admitted to a recognized bar).
- Minimum 8 years post‑qualification experience in a leading law firm, corporate, or professional services environment.
- Demonstrated expertise in privacy governance, cross‑border data transfer, and complex data incidents.
- Relevant certifications (e.g., CIPP/E, CIPP/G, CIPP/US, CIPM, CISM, CISSP) considered a plus.