Fieldfisher
Data & Privacy Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
What can you expect?
The Privacy Manager at Fieldfisher will lead the firm’s efforts to ensure the highest standards of data privacy and protection. This role is responsible for the firm’s compliance with global privacy laws, including GDPR, and other regional regulations. The Privacy Manager will oversee the design, implementation, and monitoring of privacy practices across the firm, ensuring that client and employee data is handled with the utmost care and in full compliance with legal obligations. This role involves collaboration with various teams, including legal, IT, and HR, to maintain and improve the firm’s data privacy framework.
Responsibilities
Privacy Program Management
- Develop and manage the firm’s privacy governance program, policies, and procedures to ensure compliance with GDPR, and other applicable privacy laws.
- Reporting issues to the Firm's Data Protection Officer (DPO), providing management information and liaising with them on incidents, DPIAs etc., as required.
- Regularly review and update privacy policies, ensuring they remain current with evolving legal and regulatory requirements.
- Oversee privacy audits and assessments to evaluate the effectiveness of data privacy measures and identify areas for improvement.
- Mapping data flows and ensuring the Firm's records of personal data processing are kept up-to-date.
Compliance and Monitoring
- Implement robust privacy controls and systems to ensure the firm’s compliance with global data privacy laws.
- Conduct data protection impact assessments (DPIAs) for new initiatives, ensuring privacy considerations are integrated from the outset.
- Monitor privacy-related developments in legislation, regulations, and best practices, and adjust the firm’s privacy program accordingly.
Incident Management
- Advise on the response to incidents, including personal data breaches, ensuring prompt action and compliance with reporting requirements.
- Develop and maintain incident response plans, coordinating with legal and IT teams for swift investigation and remediation of data breaches.
Training and Awareness
- Develop and deliver training programs for staff on privacy policies, data handling, and best practices.
- Raise awareness across the firm regarding the importance of privacy and data protection, ensuring a strong culture of compliance.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Data Subject Requests
- Oversee the handling of data subject requests, including rights of access, rectification, erasure, and data portability.
- Ensure all requests are managed efficiently, within legal timeframes, and in full compliance with applicable laws.
Vendor and Third-Party Management
- Collaborate with procurement and legal teams to review and assess third-party vendor agreements for data protection and privacy compliance.
- Conduct due diligence on third-party vendors to ensure they adhere to the firm’s privacy standards.
Advisory Role
- Provide guidance to various departments on privacy-related issues, ensuring all business practices and client interactions align with legal requirements.
- Serve as the primary point of contact for internal and external privacy-related inquiries and concerns.
Regulatory Liaison
- Prepare and submit any necessary documentation or reports required by supervisory authorities or the Firm's DPO.
Experience and Knowledge
Education
- Bachelor’s degree in Law, Compliance, Information Security, or a related field.
- Certifications in privacy (e.g., CIPP, CIPM, CIPT) or related professional qualifications are preferred.
Experience
- At least 5 years of experience in privacy management, compliance, or a related field, preferably within a law firm or corporate setting.
- Demonstrated experience in implementing privacy programs and ensuring compliance with GDPR, CCPA, or other privacy regulations.
- Familiarity with Information Security / Privacy frameworks such as ISO27001, ISO27701 or NIST.
- Experience of using OneTrust or other privacy management tools.
- Strong understanding of global privacy laws and regulations, with the ability to apply them in a commercial context.
Skills
- In-depth knowledge of data privacy principles and frameworks (e.g., GDPR, CCPA etc.).
- Strong project management skills with the ability to manage multiple privacy initiatives simultaneously.
- Excellent communication and interpersonal skills, with the ability to explain complex privacy concepts to non-legal staff.
- Analytical mindset with the ability to identify risks and propose solutions to mitigate them.
- High attention to detail and the ability to maintain confidentiality.
Who are we looking for?
We don't have a type. We believe our differences are our strength; varied cultures, approaches and experience can only benefit us.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What do we offer?
- You can be yourself: It takes everyone to make us who we are. We’re a culture of diverse perspectives, with each of us making unique contributions that make us better together.
- In the office or WFH?: We think the best balance is more time in the office than at home, so we operate a 60:40 rule.
- Beyond salary: We offer plenty of benefits; private medical insurance, health cash plan, dental insurance, life assurance, critical illness insurance, matched pension contributions up to 7%, holiday trading, plus many more. Visit: [Reward & Benefits ¦ Fieldfisher](Reward & Benefits ¦ Fieldfisher).
- Modern Office Space: Located at Adelaide Exchange, Belfast City Centre, with excellent commuter links and parking nearby.
- Nurturing your talent: Take a 'build a career' approach to your training. You'll be on a pathway but free to wander if you see something you'd like to study more closely.
- Funnel your interests: You have a life outside work, and we can help it to flourish. Join clubs, affinity networks, inclusive events, and pro bono/charity initiatives.
Inclusion is not exclusive
If all our differences are highlighted, no one stands out for being different. At Fieldfisher, all our rich diversity is celebrated. We will provide the equipment to allow you to shine, at interview and beyond. Just let us know what you need. For accessibility information on our Belfast office, visit: [Accessing Fieldfisher Belfast Hub ¦ Fieldfisher](Accessing Fieldfisher Belfast Hub ¦ Fieldfisher)
What to do next
- Click 'Apply Now', complete an online application and upload a CV.
- Successful applications will be invited to a 20–30-minute introductory call with a recruiter.
- Every role recruits differently. But we'll always let you know what to expect from the process, so you get no surprises.
- For hybrid opportunities, you'll be invited to visit our offices for a face-to-face meeting.
- We try to make sure the process takes around 2-3 weeks only, but we can't always promise that. We will work around everyone's availability. You can contact us at Anita.Magorrian@fieldfisher.com.
We recruit on a rolling basis. Your application may be reviewed before the application deadline. We accept applications until we have filled the role.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London