Allen & Overy is a leading global law firm operating in over thirty countries. By turning our insight, technology and talent into ground-breaking solutions, we’ve earned our reputation as a firm that leads the industry and opens up new possibilities in law. Our lawyers are leaders in their field – and the same goes for our support teams. Ambitious, driven and open to fresh perspectives, we find new ways to deliver our services and maintain our reputation for excellence, in all that we do. The nature of law is changing and with that change brings unique opportunities. We are defined by our consistent commitment to creating a collaborative and supportive working culture and investing in your progress. We’re committed to supporting a culture that drives diversity and inclusion. Every day, we’re working hard to create an environment where you feel you can bring your authentic self to work. To be comfortable and confident to be who you are in the workplace. To feel like you belong. We offer rewarding careers that are built around your strengths and designed to ensure you can achieve your personal and professional ambitions. Joining our global team, you’ll discover what collaborating on a global scale really looks like; you’ll learn how to help drive change; and you’ll be at the heart of an organisation that’s defining the future of law. If you’re ready to find a place to thrive: It’s Time. Department purpose Risk Function Allen & Overy’s Risk function, led by partner, Simon Fuge, is comprised of teams of market leading experts and is at the heart of the sustainability and success of our firm. It has a core responsibility to uphold the values of Allen & Overy and support the strategic objectives of the business. Our lawyers and industry experts provide high quality legal and risk advice to the global firm, its senior management, governance bodies and partners. The mission of the Data Privacy Team is to foster a strong culture of data protection compliance throughout A&O while providing pragmatic and business-focussed advice in a highly regulated area. The Data Privacy Team advises on data privacy and information security issues affecting A&O, including: The creation and maintenance of a global programme of measures and documentation designed to ensure on-going compliance with privacy laws globally The legal aspects of information security and data management to meet legal and regulatory requirements Incident response and remediation Dealing with individual rights requests Data export restrictions and data localisation requirements with a view to preserving international data flows Working closely with fee earners, IT and others on technology and data innovations to ensure privacy and information security by design Devising and delivering the firm’s privacy training programmes Advising on, and ensuring compliance with, applicable regulatory reporting requirements. Role and responsibilities Allen & Overy is seeking an experienced individual to form part of the firm’s global Data Privacy Team and support all aspects of the work of the firm’s Chief Privacy Officer. It is a broad, fast paced and challenging privacy role. The successful candidate will carry out tasks which draw on a wide skillset. The role would be suited to lawyers of 1+ year’s PQE or non-lawyers with a strong track record of working in risk management and with experience of, or a strong interest in, data protection. The key aspects of the role are: Assisting in the support and maintenance of the existing global programme of measures designed to comply with privacy laws globally Helping to manage, support and deliver a global programme of work designed to comply with recent changes to European data protection law support the work of the department more generally, including incident response and individual rights requests Working closely with a range of stakeholders on technology and data innovations to help ensure good data handling practices and privacy by design Helping to gather and analyse data to support the work of the Data Privacy Team Conducting data privacy impact assessments, including in relation to software, systems and processes Establishing and maintaining good relations with key stakeholders globally to help support and roll out changes to the privacy compliance programme Advising and guiding colleagues across the firm on privacy and data protection issues and policies Developing and delivering training and communication plans in order to bring about/embed change Creating content for and delivering presentations and reports Helping to create and maintain policies, guidance and pro-forma documentation in connection with data protection compliance within the firm Key requirements Essential The ideal candidate will be able to demonstrate the following skills and experience: Experience of working in risk management or data protection Experience of dealing with and advising a wide range of business stakeholders in determining requirements and priorities, as well as resolving issues the ability to understand, explain and advise on technical processes using business-friendly language Excellent IT skills (Microsoft Office suite of applications and other software, such as eDiscovery or other specialist software) A proven ability to work independently and proactively and to manage and prioritise a busy workload Self-motivation and the ability to manage new and varied challenges Excellent attention to detail; and A collaborative approach and the ability to work well in a small team and on cross-departmental projects Desirable Experience in providing directive and pragmatic advice on data privacy, information security and data handling issues A relevant data privacy qualification such as CIPP/E and/or CIPM Experience of working in an international corporate or professional services environment