Senior Legal Counsel, Data and Cybersecurity

• support and work closely with HSBC regional and global data and cybersecurity teams to safeguard HSBC’s data and systems
• advise on a wide array of activities, including complex regulations, privacy policies, and incident response plans
• assist in data and cybersecurity incident response and draft, review, and negotiate privacy and cybersecurity contractual provisions

• You are a qualified lawyer and in good standing
• You have at least 5 years of experience practicing cyber and data privacy law
• You have expertise or solid understanding of key data and privacy regulations (e.g. UK / EU GDPR, HK PDPO, data transfer requirements, schemes and systems, such as SCCs and TIAs, etc.)
• You have experience drafting incident response plans and/or crisis management playbooks
• An internationally recognized privacy professional qualification such as CIPP is preferred, but not required
• You have experience advising on complex data and privacy issues, including experience of international data sharing issues, operating in a regulated sector and / or engagement with privacy regulators
• You have experience navigating cybersecurity incidents and/or broader litigation and investigations experience, including interacting with regulatory affairs teams and/or regulators directly
• You have an interest in and understanding of technology, and the ability to relate to technology professionals
• You have worked at a financial institution, law firm or other fast-paced, complex work environment
• You are a collaborative teammate but also a self-starter who can work independently with an entrepreneurial drive
• You have excellent negotiation and drafting skills and will have demonstrated the ability to take initiative and apply good commercial and legal judgment

An internationally recognized privacy professional qualification such as CIPP

continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment