Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Privacy Counsel - UK role.
Rezi rewrites your resume against Cyera's job description. Free.
Tailor your resume to this Privacy Counsel - UK role.
Rezi rewrites your resume against Cyera's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Privacy Counsel - UK posting at Cyera — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Privacy Counsel - UK posting at Cyera — free, in seconds.
About the Role
As Privacy Counsel, you will be a hands-on member of Cyera's Legal team in London, playing a central part in the day-to-day operation of our global privacy program. You will work across product, business and security teams, covering GDPR, UK GDPR, CCPA/CPRA and the growing patchwork of state and international privacy laws. This is an individual contributor role for a privacy lawyer with 4-5 years of experience who wants broad exposure and real ownership. You will operate the privacy practice: keeping the data inventory and records of processing current, running assessments, handling subprocessor and data subject request processes, updating internal policies and answering customer and privacy questions and setting Cyera’s privacy standards across vendors. We are a lean, fast-moving team, so your work will have an immediate impact and the room to grow is real. You will report and work closely with Cyera's Senior Legal Director and other Legal team members.
Responsibilities
- Manage privacy program operations, including data inventory, records of processing, data flow documentation, and retention schedules.
- Prepare and update privacy notices for customers, website visitors, employees, and candidates.
- Develop and update internal privacy policies, procedures, and training for business and engineering teams.
- Conduct and document privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and transfer impact assessments (TIAs).
- Partner with Product and Engineering on privacy-by-design for new features, including AI-related functionality.
- Track privacy obligations across GDPR, UK GDPR, CCPA/CPRA, and other relevant privacy laws.
- Translate privacy law changes into control, policy, or process updates.
- Support the subprocessor onboarding, notification, and disclosure process.
- Assess new vendors and maintain the public subprocessor list.
- Manage data subject request (DSR) handling from intake to response.
- Support privacy incident response, including assessing notification obligations and documenting decisions.
- Serve as the GRC point of contact for customer and vendor privacy questionnaires and RFPs.
- Review and advise on data processing agreements (DPAs) and privacy terms with customers, partners, and vendors.
- Provide timely and accurate advice to legal team members.
- Advise Product, Sales, Marketing, HR, IT, and Security on privacy questions with practical, risk-based guidance.
- Escalate high-risk issues and contribute to a unified, scalable approach to risk across the Legal function.
Requirements
- Qualified to practice law in England & Wales or another European jurisdiction.
- 4-5 years of post-qualification experience advising on privacy and data protection.
- Solid working knowledge of GDPR and UK GDPR.
- Familiarity with CCPA/CPRA and other US state and international privacy laws, applied practically and commercially.
- Hands-on experience with privacy program operations: RoPA and data mapping, retention, privacy notices, and conducting PIAs, DPIAs, and TIAs.
- Familiarity with SaaS, security products, and related privacy issues.
- Experience with data subject requests, vendor and subprocessor reviews, and DPA review and negotiation.
- Ability to translate legal requirements into clear, actionable guidance and process changes for product, engineering, and business teams.
- Strong organizational skills with the ability to manage multiple projects and deadlines.
- Excellent written and verbal communication in English.
- Proactive, solution-oriented team player with sound judgment, comfortable owning work independently in a fast-paced environment.
- In-house experience at a technology, SaaS, data security, or cloud company is preferred.
- Familiarity with cloud environments and data security concepts is preferred.
- Experience supporting customer security and privacy questionnaires, RFPs, or trust and GRC functions is preferred.
- Exposure to AI governance and emerging regulation, including the EU AI Act, is preferred.
- A privacy certification such as CIPP/E, CIPM, or CIPT is preferred.
- Experience with privacy or contract management tooling is preferred.
Skills
- Privacy program operations
- Data inventory and records of processing (RoPA)
- Data flow documentation
- Retention schedules
- Privacy notices
- Privacy impact assessments (PIAs)
- Data protection impact assessments (DPIAs)
- Transfer impact assessments (TIAs)
- Privacy-by-design
- GDPR
- UK GDPR
- CCPA/CPRA
- Subprocessor reviews
- Data subject request (DSR) handling
- Privacy incident response
- GRC
- Vendor assessments
- Data Processing Agreements (DPAs)
- SaaS
- Security products
- Cloud environments
- Data security concepts
- AI governance
- EU AI Act
- CIPP/E
- CIPM
- CIPT
- Privacy management platforms
- CLM systems
Location
- London
Work Type
- Hybrid working
Experience Level
- 4-5 years of post-qualification experience
Education Level
- Qualified to practice law in England & Wales or another European jurisdiction
- Privacy certification such as CIPP/E, CIPM or CIPT is preferred
Benefits
- Hybrid working from our London base
- Competitive salary and equity
- Generous PTO, in line with statutory requirements
- Paid holidays and sick time, in accordance with local law
- Health, dental and vision insurance, or the applicable local equivalent
- Life and disability insurance, or the local equivalent, as applicable
- The opportunity to build and shape Cyera's privacy program at a company at the center of AI and data security
About the Company
- Cyera is at the center of how the world adopts AI securely.
- Cyera's mission is to give enterprises the confidence to embrace AI safely.
- Cyera started by solving the hardest problem in data security: finding and securing data faster and more precisely than anyone thought possible.
- Cyera's foundation is now the essential AI trust infrastructure for the Fortune 1000.
- Cyera is hiring mission-driven talent to put leaders at the center of their story.