Data Protection Manager/Lawyer

Governance, Process Improvement and Global Programme Development

- Review and enhance existing rights request and complaint-handling processes and controls.
- Support the design and implementation of a sustainable and scalable global operating model for rights requests and complaints.
- Develop and maintain standard operating procedures, playbooks, guidance and templates.
- Identify opportunities for automation, workflow optimisation and improved use of technology.
- Lead the implementation and development of rights request and complaint-handling processes across APAC and MEA, followed by expansion across Europe.
- Develop management information, reporting frameworks and performance metrics to monitor effectiveness, risk and service delivery.
- Analyse trends to identify recurring issues, emerging risks and opportunities for continuous improvement.
- Support the training and development of analysts and other colleagues involved in rights request and complaint handling.

The Firm

When you work at Clyde & Co, you join a team of 500 partners, 2,400 lawyers, 3,200 legal professionals and 5,500 people in nearly 70 offices and associated offices worldwide. Our values are the principles that guide the decisions we make, unite us in our endeavours and strengthen our delivery, for both our clients and our firm. We work as one, excel with clients, celebrate difference and act boldly. We are committed to operating in a responsible way by progressing towards a diverse and inclusive workforce that reflects the communities and clients it serves. We are devoted to providing an environment in which everyone can realise their potential, using its legal and professional skills to support its communities. We do this through pro bono work, volunteering and charitable partnerships, and minimising the impact it has on the environment, including through our commitment to the SBTi Net-Zero standard and the setting of ambitious emissions reduction targets.

Our Commitment

Clyde & Co is proud to be an equal opportunities employer. Our values encourage us to support fairness, celebrate diversity and prohibit all forms of discrimination in the workplace to allow everyone to excel at work. Therefore, we welcome and encourage all applications from suitably qualified individuals, regardless of background or identity. Learn more about our interview process.

Responsibilities

Lead the end-to-end management of data subject access requests (DSARs) and other data subject rights requests, supervising analysts and supporting resources as required.; Oversee initial triage and assessment, including scope, complexity, legal and regulatory risk and resourcing requirements.; Determine and direct response strategies, particularly where matters involve litigation, regulatory considerations or reputational risk.; Direct searches for relevant information and provide second-level review and quality assurance of outputs and redactions, leading document review exercises where necessary.; Assess the application of exemptions and restrictions, proportionality, identity verification requirements and statutory timescales.; Review and approve final response packs, correspondence and response letters, escalating novel, complex or high-risk legal matters where appropriate.; Maintain accurate records and audit trails to demonstrate compliance with legal requirements and internal procedures.

Requirements

Lawyer or experienced legal/data protection professional with at least five years’ experience in data privacy and data protection compliance .; Significant experience leading the operational management of data subject rights requests, privacy complaints and related disputes.; Strong knowledge of data protection and privacy law, with the ability to apply legal and regulatory requirements to complex operational matters.; Strong judgement and investigative skills, with a sound understanding of privilege, client confidentiality and litigation in the context of a professional services or similarly regulated environment.; Demonstrable experience supervising review teams and making defensible decisions on scope, exemptions, privilege, confidentiality, disclosure and risk.; Experience developing and improving operational processes and controls, rather than solely administering established procedures.; Experience operating across multiple jurisdictions, with the capability to support the expansion of rights request and complaint-handling processes across APAC, MEA and Europe.; Strong leadership and stakeholder management skills, with the confidence to advise and challenge senior stakeholders where appropriate.; A hands-on approach, with the willingness to undertake document review, case management, investigations and training when required.; Commercial, pragmatic and highly organised, with the ability to manage multiple complex and sensitive matters simultaneously.