Senior Legal Counsel, Privacy & Security

Position: Senior Counsel - Privacy and Legal Information Security 
 
Reports to: Deputy General Counsel/DPO, Privacy and Legal Information Security  
Location: London (Office 3/5 days) 

Job Description 

Core Responsibilities: 

• Independently handle privacy and information security-related matters and inquiries from a wide range of groups across the Company and provide timely, accurate, and pragmatic and actionable advice to facilitate privacy and information security compliance with the Company’s policies, standards and applicable laws and best practices. 

• Lead on evaluating various Comcast programs and initiatives considering applicable privacy and information security requirements. 

• Work closely with enterprise and business unit stakeholders to embed privacy and information security principles into business plans and strategic initiatives during the design and execution process. 

• Assist in the creation, maintenance and implementation of policies, processes, data inventories and records of processing, and associated documentation relating to processing of data. 

• Review of company practices to ensure consistency with existing policies and other internal privacy and information security governance documents. 

• Leading on Privacy Impact and Risk Assessments relating to new businesses and initiatives involving processing of personal information. 

• Monitor, summarize and lead on implementing relevant requirements driven by developments in privacy and information security related laws, regulations, standards, and best practices in the UK, EU and other international jurisdictions as needed (such as GDPR, ePrivacy Directive, NIS2, Cyber Resilience Act, and self-regulatory organizations such as DAA and NAI). 

• Provide practical, proactive legal counsel on privacy and information security issues, including data governance, data retention, data minimization, and incident response matters including coordinating with law enforcement and other regulatory agencies. 

• Lead and advise on post-acquisition privacy and information security integration efforts for newly acquired entities. 

• Conduct awareness and training efforts as needed and/or required to increase employee understanding of company privacy policies, data handling and information security practices and procedures, and legal obligations. 

• Support the work of the Data Protection Officer. 

• Carry out/perform duties consistent with strategic plans and directives as determined by leadership. 

• Drive results and growth. 

• Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences. 

• Support a culture of inclusion in how you work and lead. 

Skills and Experience: 

• A minimum of 5 years combined legal experience at a top law firm and/or in-house legal department with proven experience of at least 3 years of privacy and information security experience. 

• Experience with the details and practical application of current European and UK privacy and information security legislation, including an in depth understanding of the GDPR, experience with the ePrivacy Directive, NIS2, the Cyber Resilience Act, and other related laws. Experience with additional global privacy and information security laws and operating within a global privacy framework preferred. 

• Demonstrated transactional experience, including reviewing, drafting and negotiating privacy and data protection contract terms and agreements, data processing, usage, information security and/or transfer agreements. 

• Experience with conducting privacy impact assessments and advising on applicable privacy and information security legal requirements. 

• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance.  

• Ability to lead and manage multiple projects and meet deadlines with consistently high-quality results. 

• Ability to work independently with limited supervision. 

• Regular, consistent, and punctual attendance.  

• A pragmatic, risk-based approach and collaborative mindset.  

• Strong academic credentials. 

• A recognised privacy or cyber security qualification such as CIPP/E or equivalent would be preferable.  

• Experience with privacy management platforms and familiarity with productivity tools such as Copilot and Harvey would be advantageous.  

• This position is based in London, with some potential European and US travel required. 

Disclaimer: 

• This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.