Data Privacy & Cybersecurity Lawyer Job at Axiom Law

Cybersecurity & Data Privacy Associate

A US law firm is seeking to hire a Cybersecurity & Data Privacy Associate (1–7 P...

Location

United Kingdom , London

Salary:

180000.00 - 280000.00 GBP / Year

Douglas Scott

Expiration Date

Until further notice

Requirements

England & Wales-qualified lawyer, or equivalent
strong academic background
experience in cybersecurity and data privacy
preferably gained at a top-tier international firm
strong passion for cybersecurity, data protection, and emerging technology law

Job Responsibility

Advising on cybersecurity preparedness and incident response
Managing regulatory investigations and enforcement actions, particularly with UK/EU regulators
Assisting clients with building GDPR and UK privacy compliance frameworks, including NIS2, DORA, and operational resilience laws
Supporting M&A due diligence and data privacy aspects of transactions
Drafting privacy policies, data protection agreements, and notices
Providing counsel on AI governance and emerging tech issues

What we offer

Year-end bonus
Comprehensive benefits package, including technology allowances, gym benefits, private medical insurance, enhanced parental leave, and more
Access to top-tier training, mentoring, and real-time feedback from leading experts
Dedicated support for lateral hires through the firm’s Skadden Integration+ program
Opportunities to participate in pro bono work through the firm’s collaboration with LawWorks

Fulltime

Cybersecurity & Data Privacy Associate

A US law firm is seeking to hire a Cybersecurity & Data Privacy Associate (1–7 P...

Location

United Kingdom , London

Salary:

180000.00 - 280000.00 GBP / Year

Douglas Scott

Expiration Date

Until further notice

Requirements

Experience in privacy and cybersecurity, preferably gained at a top-tier international firm
Strong academic background
England & Wales-qualified lawyer, or equivalent
Strong passion for cybersecurity, data protection, and emerging technology law
Ability to stay ahead of developments in AI and engage with emerging trends.

Job Responsibility

Advising on cybersecurity preparedness and incident response
Managing regulatory investigations and enforcement actions, particularly with UK/EU regulators
Assisting clients with building GDPR and UK privacy compliance frameworks, including NIS2, DORA, and operational resilience laws
Supporting M&A due diligence and data privacy aspects of transactions
Drafting privacy policies, data protection agreements, and notices
Providing counsel on AI governance and emerging tech issues.

What we offer

Top of the market US market salary
Year-end bonus
Comprehensive benefits package including technology allowances, gym benefits, private medical insurance, enhanced parental leave, and more
A hybrid working model (typically 4 days in the office for full-time lawyers)
Access to top-tier training, mentoring, and real-time feedback from leading experts
Dedicated support for lateral hires through the firm’s Skadden Integration+ program
Opportunities to participate in pro bono work through the firm’s collaboration with LawWorks.

Fulltime

Cybersecurity & Data Privacy Associate

A US law firm is seeking to hire a Cybersecurity & Data Privacy Associate (1–7 P...

Location

United Kingdom , London

Salary:

180000.00 - 280000.00 GBP / Year

Douglas Scott

Expiration Date

Until further notice

Requirements

England & Wales-qualified lawyer or equivalent
strong academic background
experience in cybersecurity and data privacy
preferably gained at a top-tier international firm
strong passion for cybersecurity, data protection, and emerging technology law

Job Responsibility

Advising on cybersecurity preparedness and incident response
Managing regulatory investigations and enforcement actions
Assisting clients with building GDPR and UK privacy compliance frameworks
Supporting M&A due diligence and data privacy aspects of transactions
Drafting privacy policies, data protection agreements, and notices
Providing counsel on AI governance and emerging tech issues

What we offer

Year-end bonus
Comprehensive benefits package, including technology allowances, gym benefits, private medical insurance, enhanced parental leave
Access to top-tier training, mentoring, and real-time feedback from leading experts
Dedicated support for lateral hires through the firm’s Skadden Integration+ program
Opportunities to participate in pro bono work through the firm’s collaboration with LawWorks

Fulltime

Cybersecurity & Data Privacy Associate

A US law firm is seeking a Cybersecurity & Data Privacy Associate to join its dy...

Location

United Kingdom , London

Salary:

180000.00 - 280000.00 GBP / Year

Douglas Scott

Expiration Date

Until further notice

Requirements

England & Wales-qualified lawyer or equivalent
strong academic background
experience in cybersecurity and data privacy
experience with GDPR and UK privacy compliance frameworks
understanding of NIS2, DORA, and operational resilience laws
knowledge of M&A due diligence and data privacy aspects of transactions
ability to draft privacy policies, data protection agreements, and notices
passion for cybersecurity, data protection, and emerging technology law
knowledge of AI governance and regulation.

Job Responsibility

Advising on cybersecurity preparedness and incident response
managing regulatory investigations and enforcement actions, particularly with UK/EU regulators
assisting clients with building GDPR and UK privacy compliance frameworks, including NIS2, DORA, and operational resilience laws
supporting M&A due diligence and data privacy aspects of transactions
drafting privacy policies, data protection agreements, and notices
providing counsel on AI governance and emerging tech issues.

What we offer

Top of the market US market salary
year-end bonus
comprehensive benefits package, including technology allowances, gym benefits, private medical insurance, enhanced parental leave
hybrid working model
access to top-tier training, mentoring, and real-time feedback
dedicated support for lateral hires through the firm’s Skadden Integration+ program
opportunities to participate in pro bono work through the firm’s collaboration with LawWorks.

Fulltime

New

Data Legal Counsel

The Data Legal Team provides privacy and data-related legal advice, support and ...

Location

United Kingdom , London; Glasgow

Salary:

Not provided

Barclays

Expiration Date

Until further notice

Requirements

Qualified lawyer
Excellent technical knowledge of data privacy law, including the GDPR and EU/International experience, social media and data commercialisation legal issues, cyber and insider threat (prevention, detection and incident response)
Solid technical knowledge of contract, commercial, IT and/or outsourcing law
Strong communication skills - verbal and written (technical and non-technical)
Analysis, judgment and integrity
Business awareness and commercial focus

Job Responsibility

Development and implementation of best practice legal strategies for risk management and compliance
Legal advice and support to the business on cybersecurity, data privacy, intellectual property (IP) and emerging tech matters, including cybersecurity and data privacy incidents, IP protection and technology deployment
Representation of the bank in legal proceedings related to cybersecurity, data privacy, IP protection and emerging tech, such as litigation, arbitration, and regulatory investigations
Creation and review of legal documents such as data protection policies, cybersecurity protocols, IP licenses and emerging tech policies to ensure compliance with applicable laws and regulations
Legal research and analysis to stay up to date on changes in laws and regulations that may impact the bank's cybersecurity, data privacy, IP protection and emerging tech practices
Developing and delivering training programmes to educate employees on legal and regulatory requirements related to cybersecurity, data privacy, IP protection and emerging tech
Pro-active identification, communication, and provision of legal advice on applicable laws, rules and regulations (LRRs)
Keeping up to date with regards to changes to LRRs in the relevant coverage area
Ensuring that LRRs are effectively allocated to, and adequately reflected within, the relevant policies, standards and controls

What we offer

Cycle or run to work? We’ve got everything you need – from cycle hire and parking areas to new showering and changing facilities
CoSpace is our drop-in co-working space, where networks are built, problems are solved collectively and our community is strengthened
Our Wellness Suite includes a well-equipped gym and exercise studios, and provides personal training sessions and massage therapy

Fulltime

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...

Location

United States , San Francisco; New York

Salary:

180000.00 - 270000.00 USD / Year

Airwallex

Expiration Date

Until further notice

Requirements

U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
High degree of ownership, resilience, and pragmatism
comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel

Job Responsibility

Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance

What we offer

Offers Equity
Offers Bonus
medical, dental, and vision insurance
a 401(k) plan
short-term and long-term disability
basic life insurance
well-being benefits
20 paid days of vacation
12 paid days of company holidays

Fulltime

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...

Location

United States

Salary:

160000.00 - 250000.00 USD / Year

Airwallex

Expiration Date

Until further notice

Requirements

U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
High degree of ownership, resilience, and pragmatism
comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel

Job Responsibility

Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance

What we offer

Offers Equity
Offers Bonus
medical, dental, and vision insurance
a 401(k) plan
short-term and long-term disability
basic life insurance
well-being benefits
20 paid days of vacation
12 paid days of company holidays in a calendar year

Fulltime