Data Protection Specialist

About Withersworldwide

A law firm focused on people and collaboration. For the past 125 years, Withers has supported some of the world's most remarkable people and organisations at defining moments in their lives. We are the only international law firm focused on successful individuals and private capital, working closely with founders, investors and family offices. We also advise governments, charities, global brands and start-ups of all shapes and sizes. Many of our clients are shaping the future and creating solutions to tackle many of the world's problems.  It makes for a fascinating and challenging practice. Our role is to get to know each individual client, find out where they want to be, and help them to get there – whether they are building a business, looking after their family, involved in a complex dispute or protecting their finances for the future. To meet their unique needs we are exceptionally collaborative, working together across teams and time zones. We are agile, focusing on strategy rather than rigid ideas and traditional hierarchy. It is a truly flexible working culture that puts people first. Join us to be part of a team that is always looking to the future. Where initiative, big ideas and bold moves are always encouraged. Where you can truly be yourself.

What are we looking for?

At Withersworldwide, we are committed to ensuring that all of our clients' data is protected, and that our business complies with data protection legislation. We’re seeking a Data Protection Specialist to support the Data Protection Officer to assist us to improve our management of potentially sensitive information, carry out regular internal privacy audits, and act as a main point of contact between our varying data protection authorities.  Withers has a mandate to continue to deliver a very broad and increasingly complex set of new client digital services and capabilities over the coming years to support ongoing transformation in support of business and clients. Whilst building and delivering new services and maintaining existing, it is imperative that these, and our existing services and products, comply with existing and ongoing privacy regulation.

This role requires experience of working in a medium to large multi-site professional services organisation dealing with personal data.  Strong written and verbal communication skills are required with the ability to work with a wide range of people including vendors, project managers, technologists, legal staff, partners, secretaries and other support staff.

A very high level of personal organisation and professionalism is required, together with a 'can-do' attitude and an ability to work to tight deadlines and under pressure.  This person must inspire a positive work environment and help champion quality, innovation, teamwork and service to the business.

Technical experience required

• Minimum of three years' experience working in a data protection  
• Knowledge in European data protection laws and practices including an in-depth understanding of the GDPR.  Understanding of US and APAC privacy regulation of benefit
• Good understanding of data protection principles for processing personal data for marketing purposes 
• Experience within a legal, audit and/or risk function department
• Strong project management skills
• Ability to work well under pressure and manage sensitive and confidential information
• Excellent verbal and written communication skills, with strong attention to detail
• Great interpersonal skills and ability to work well both independently and as part of a team
• Privacy qualifications are desirable 
• Most important is having a desire to learn and develop your skills while helping our clients be secure, performant and resilient

Areas of focus and responsibilities

• Identifying areas for privacy improvement, designing, documenting, and implementing improvements in our regions
• Horizon scanning and keeping up to date with development in data protection laws 
• Providing Privacy Advice on Projects and reviewing Privacy Impact Assessments
• Incorporate standard contractual clauses in relevant agreements 
• Auditing and Benchmarking
• Assisting with 3rd Party Assurance Assessments
• Assisting with Data Subject Access Requests
• Assisting with Operational Resilience Planning and Testing, such as IT Disaster Recovery, Business Continuity and Crisis Management in regard to data protection requirements
• Providing advice, guidance, creating training materials and promoting good practice

The Essentials 

• We operate a hybrid policy with a requirement with typically two days a week in the office
• 9.30am to 5.30pm but out-of-hours flexibility is a must to provide round the clock support as part of the privacy specialist. This includes being contactable out-of-hours if needed for data breach support and response
• 12 week probation period
• 12 week notice period
• Flexible benefits package including pension, private medical, season ticket loan, subsidised gym memberships, lifestyle discount scheme, on site café and more

Information for Recruitment Agencies

Withersworldwide endeavours to recruit and fill vacancies directly. However, when we do need to engage with agencies, Withersworldwide operates a preferred supplier list and will not be accepting unsolicited applications from non-PSL agencies for this role.

Equal Opportunities Employment Statement 

It is the policy of Withersworldwide to provide equal opportunities for all employees in relation to recruitment, training and promotion.  Decisions in these areas will be made only by reference to the requirements of the job and shall not be influenced by any consideration of age, disability, gender reassignment, marriage or civil partnership, pregnancy or maternity, race (including colour, nationality and ethnic and national origin), religion or belief, sex or sexual orientation.