Senior Legal Counsel, Privacy & Security in London

Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast.

We are looking for a passionate, collaborative, and experienced attorney to join our dynamic team in the Legal Department’s Legal Privacy and Information Security group. This role will report to the DGC/DPO Privacy and Legal Information Security and will focus on providing legal advice to support Comcast Cable’s global privacy and information security program. The role commands thought leadership in legal matters, influencing business strategy and risk management. Strong familiarity with the relevant legal and regulatory landscape in this area is required, as well as providing counsel on privacy and information security laws. This is an exciting opportunity to join a growing team in a dynamic, international company.

Core Responsibilities:

• Independently handle privacy and information security-related matters and inquiries from a wide range of groups across the Company and provide timely, accurate, and pragmatic and actionable advice to facilitate privacy and information security compliance with the Company’s policies, standards and applicable laws and best practices.
• Lead on evaluating various Comcast programs and initiatives considering applicable privacy and information security requirements.
• Work closely with enterprise and business unit stakeholders to embed privacy and information security principles into business plans and strategic initiatives during the design and execution process.
• Assist in the creation, maintenance and implementation of policies, processes, data inventories and records of processing, and associated documentation relating to processing of data.
• Review of company practices to ensure consistency with existing policies and other internal privacy and information security governance documents.
• Leading on Privacy Impact and Risk Assessments relating to new businesses and initiatives involving processing of personal information.
• Monitor, summarize and lead on implementing relevant requirements driven by developments in privacy and information security related laws, regulations, standards, and best practices in the UK, EU and other international jurisdictions as needed (such as GDPR, ePrivacy Directive, NIS2, Cyber Resilience Act, and self-regulatory organizations such as DAA and NAI).
• Provide practical, proactive legal counsel on privacy and information security issues, including data governance, data retention, data minimization, and incident response matters including coordinating with law enforcement and other regulatory agencies.
• Lead and advise on post-acquisition privacy and information security integration efforts for newly acquired entities.
• Conduct awareness and training efforts as needed to increase employee understanding of company privacy policies, data handling and information security practices and procedures, and legal obligations.
• Support the work of the Data Protection Officer.
• Carry out/perform duties consistent with strategic plans and directives as determined by leadership.
• Drive results and growth.
• Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences.
• Support a culture of inclusion in how you work and lead.

Skills and Experience:

• A minimum of 5 years combined legal experience at a top law firm and/or in-house legal department with proven experience of at least 3 years of privacy and information security experience.
• Experience with the details and practical application of current European and UK privacy and information security legislation, including an in depth understanding of the GDPR, experience with the ePrivacy Directive, NIS2, the Cyber Resilience Act, and other related laws.
• Experience with additional global privacy and information security laws and operating within a global privacy framework preferred.
• Demonstrated transactional experience, including reviewing, drafting and negotiating privacy and data protection contract terms and agreements, data processing, usage, information security and/or transfer agreements.
• Experience with conducting privacy impact assessments and advising on applicable privacy and information security legal requirements.
• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance.
• Ability to lead and manage multiple projects and meet deadlines with consistently high-quality results.
• Ability to work independently with limited supervision.
• Regular, consistent, and punctual attendance.
• A pragmatic, risk-based approach and collaborative mindset.
• Strong academic credentials.
• A recognised privacy or cyber security qualification such as CIPP/E or equivalent would be preferable.
• Experience with privacy management platforms and familiarity with productivity tools such as Copilot and Harvey would be advantageous.

This position is based in London, with some potential European and US travel.