Assistant Group General Counsel: Data and Technology

About the role

The Assistant Group General Counsel: Data and Technology provides expert legal advice to the Glory group on all data and technology matters, supporting the Group General Counsel, the Group DPO and the AI Officer and external advisers. The role covers data protection and privacy, AI governance and compliance, and software, SaaS and technology contracting, and is responsible for building and maintaining data protection, AI governance and technology-use policies, standards and training.

Key responsibilities

• Draft, evaluate and negotiate commercial agreements, review customer terms and conditions and support commercial teams and the Group DPO and AI Officer.
• Carry out data protection and technology risk assessments, including DPIAs and legitimate interest assessments.
• Monitor developments in data protection, privacy, AI and technology law (UK GDPR, EU GDPR, EU AI Act) and advise on compliance measures.
• Develop, implement and review data protection, AI governance and technology-use policies and procedures.
• Liaise with supervisory authorities and external advisers, and oversee data governance, information security and AI governance arrangements.
• Provide training on data protection, privacy and responsible use of technology and AI, and monitor adherence to policies.
• Support data protection compliance across the group, including data subject requests, records of processing, international transfers and breach response.
• Advise on AI governance, including risk assessments, model and vendor due diligence and the EU AI Act.
• Draft, review and negotiate SaaS, IaaS, cloud, software licensing, DPAs, reseller and professional services agreements, and support transaction compliance and close-out.
• Support information security and cyber-resilience, including incident response, acting as legal liaison to the information security team.

Required profile

• Licensed lawyer with a minimum of 3 years' PQE from major firms and relevant in-house experience, ideally in data protection and/or technology law.
• Practical experience advising on data protection compliance, including DPIAs, data subject requests, international transfers and breach management.
• Strong commercial awareness, ability to work autonomously and make difficult decisions.

Required skills

• Knowledge of UK GDPR, EU GDPR and the EU AI Act, and of technology and software licensing.
• Experience drafting and negotiating SaaS, IaaS, cloud and software licensing agreements and DPAs.
• Awareness of information security standards such as ISO 27001.

What we offer

• 50% hybrid working.