Senior Legal Counsel, Privacy & Security

Position:SeniorCounsel-Privacy and Legal Information Security

Reports to: Deputy General Counsel/DPO, Privacy and Legal Information Security
Location:London(Office 3/5 days)

Job Description

Core Responsibilities:

• Independently handleprivacy andinformation security-related matters and inquiries from a wide range of groups across the Company and providetimely,accurate, and pragmatic and actionable advice tofacilitateprivacy andinformation security compliance with the Company’s policies, standards and applicable laws and best practices.

• Lead on evaluatingvarious Comcast programs and initiatives considering applicable privacyand information security requirements.

• Work closely with enterprise and business unit stakeholders to embed privacyand information securityprinciples into business plans and strategic initiatives during the design and execution process.

• Assistin the creation, maintenance and implementation of policies, processes, data inventories and records of processing, and associated documentation relating to processing of data.

• Reviewofcompany practices to ensure consistency withexistingpolicies and other internalprivacy and information securitygovernance documents.

• Leading onPrivacy Impact and Risk Assessments relating to new businesses and initiatives involving processing of personal information.

• Monitor, summarize and lead on implementing relevant requirements driven by developments in privacyandinformationsecurity related laws, regulations,standards, and best practices in the UK, EU and other international jurisdictions as needed (such as GDPR,ePrivacyDirective, NIS2, Cyber Resilience Act, and self-regulatory organizations such as DAA and NAI).

• Providepractical, proactivelegal counsel on privacy and information security issues, including data governance, data retention, data minimization, and incident response mattersincluding coordinating with law enforcement and other regulatory agencies.

• Lead and advise on post-acquisitionprivacy and information securityintegration efforts for newlyacquiredentities.

• Conduct awareness and training efforts as needed and/orrequiredto increase employee understanding of company privacy policies, data handlingand information securitypractices and procedures, and legal obligations.

• Support the work of the Data Protection Officer.

• Carry out/perform duties consistent with strategic plans and directives asdeterminedby leadership.

• Drive results and growth.

• Know your stuff - beenthusiasticlearners, users and advocates of our game-changing technology,productsand services, especially our digital tools and experiences.

• Support a culture of inclusion in how you work and lead.

Skills and Experience:

• A minimum of 5 years combined legal experience at a top law firm and/or in-house legal departmentwith proven experience ofat least 3 years ofprivacy andinformation security experience.

• Experience with the details and practical application of current European and UKprivacyand information security legislation, including an in depth understanding of the GDPR, experience with theePrivacyDirective, NIS2, the Cyber Resilience Act, and other related laws. Experience withadditionalglobalprivacyand information securitylaws andoperatingwithin a global privacy framework preferred.

• Demonstrated transactional experience, including reviewing,draftingand negotiating privacy and data protection contract terms and agreements, data processing, usage,informationsecurityand/or transfer agreements.

• Experience with conducting privacy impact assessments and advising on applicableprivacy and information securitylegal requirements.

• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance. 

• Ability tolead andmanage multiple projects and meet deadlines with consistently high-quality results.

• Ability to work independently withlimitedsupervision.

• Regular,consistent,and punctual attendance. 

• A pragmatic, risk-based approach and collaborative mindset. 

• Strong academic credentials.

• A recognised privacy or cyber security qualification such as CIPP/E or equivalent would be preferable. 

• Experience with privacy management platforms and familiarity with productivity tools such as Copilotand Harveywould beadvantageous. 

• This position is based in London, with some potentialEuropeanand US travelrequired.

Disclaimer:

• This information has been designed toindicatethe general nature and level of work performed by employees in this role. It is not designed tocontainor be interpreted as a comprehensive inventory of all duties,responsibilitiesand qualifications.