Legal Counsel - Privacy

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation—inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change.

As a Data Privacy counsel, you’ll be part of BCG Global Legal team and of Data Protection office team to ensure privacy compliance of BCG offices, with a focus on processing activities in BCG EMESA offices. Working alongside our teams of legal counsels, security experts, IT architects, developers, data scientists and marketers, you will impact company-wide awareness and understanding, system architecture, and risk posture. Within this role you will be responsible for supporting and implementing all aspects of the global data protection compliance strategy and advising on legal matters surrounding data protection/privacy.

You Will:

• Provide assurance of privacy compliance with global and regional regulations (including the GDPR, UK GDPR and other applicable privacy laws in the EMESA region)
• Support the Legal and Procurement teams with data privacy agreements with global and local vendors, and vendors we use during our client projects, including contract negotiations
• Support the Legal team with data privacy agreements with clients, including contract negotiations
• Work with colleagues in the Information Security and Compliance team on review, writing, and governance of our global policies
• Work on training materials, and conduct global and local training sessions, in a way that both the message and the reasoning are understood
• Perform research and communicate up-and-coming data protection legislation
• Collaborating across teams, you will facilitate and enhance training programs, and you will foster awareness about privacy & security best practices and risks
• Support Data Protection Impact Assessments wherever necessary

What You’ll Bring:

• Legal counsel having worked for a medium-large company in the tech or consultancy sector, with a minimum of 5+ years of experience in data privacy and compliance; experience with a reputable law firm preferred
• Graduate degree (J.D.) in Law from an accredited law school and admitted to practice
• Excellent written and oral communication skills in English
• Able to synthesize complex legal data privacy analysis into clear recommendations
• Curious, talented, and diligent, and used to working closely with both technical and non-technical colleagues in a cross-functional environment
• Have a good understanding of high quality product development, in a fast-paced environment
• Understand the technologies BCG use, to be able to review data protection and retention policies and practices
• Bring extensive knowledge and experience from practice in the field of data protection, with an emphasis on the GDPR and other European and Middle East/African data privacy regulations
• Be interested in and follow international data protection legislation updates
• Know local juridical decisions, and be pragmatic and risk-oriented about solutions
• Be empathetic and work together with people from all cohorts, offices, and backgrounds

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E‑Verify Employer.