Senior Legal & Privacy Manager

• Run the day-to-day privacy programme and legal operations in partnership with the General Counsel
• Progress commercial, consumer, IP and governance matters within agreed parameters
• Triage new legal matters, set priorities, form practical recommendations, manage stakeholders and close matters
• Oversee and coordinate the privacy programme across the UK, EU, US and Canada
• Advise on new or changed uses of personal data, including marketing technology, CRM, analytics, AI and vendor initiatives
• Lead DPIAs, legitimate interests assessments and other privacy risk assessments
• Review and negotiate DPAs and privacy terms and assess vendors handling personal data
• Coordinate incident response and manage data subject requests to resolution
• Maintain records of processing, retention framework, privacy and cookie notices, and consent standards
• Support any appointed Data Protection Officer
• Own Legal's intake and matter management, including deadlines, dependencies and open actions
• Coordinate between the General Counsel, business stakeholders, external counsel and advisers
• Progress routine and moderately complex matters independently and escape significant issues
• Improve workflows, playbooks, templates and knowledge management using appropriate AI tools
• Manage contract lifecycle from intake to post-signature
• Draft, review and help negotiate NDAs, DPAs and commercial agreements
• Coordinate vendor onboarding and risk review with Finance, Procurement and Cybersecurity
• Coordinate the international trademark portfolio and brand protection matters
• Handle counterfeits, impersonation, content theft and unauthorised brand use
• Maintain terms of sale, return policies, DISCLAIMERS and customer-facing legal documentation across UK, US and Canadian sites
• Support advice on customer journeys, subscriptions, checkout and post-purchase communications
• Coordinate readiness for new consumer-law requirements and maintain disclosure standards
• Coordinate review of corporate policies and published statements
• Develop and deliver training on privacy, legal processes, IP, disclosures and endorsements
• Manage, mentor and develop the Legal Assistant
• Support the General Counsel on disputes, regulatory correspondence, employment matters and other priorities

Requirements

• Substantial in-house legal, privacy or compliance experience, with strong legal literacy and ability to apply legal and regulatory requirements commercially
• Significant hands-on privacy and data protection experience, including vendor assessments and DPAs, DPIAs, data subject rights, privacy notices, cookies and consent, incident response, records of processing and data retention
• Experience running legal or compliance workflows and a varied caseload from intake through closure
• Strong commercial judgement and confidence to progress matters independently while recognising when to escalate
• Ability to investigate issues, identify material facts and risks, and present clear options and practical recommendations
• Excellent organisation and prioritisation, including managing competing deadlines
• Strong written and verbal communication, translating complex requirements for non-legal audiences
• Strong stakeholder management and credibility to influence senior commercial and technical colleagues
• High degree of professional ethics, discretion and integrity
• Willingness to give and receive direct feedback, and to challenge and be challenged
• Law degree, qualification as a lawyer, or another relevant legal or privacy qualification is advantageous but not required
• Recognised privacy certification such as CIPP/E, CIPM or equivalent is desirable
• Experience in e-commerce, D2C, consumer health or another regulated consumer category is desirable
• Exposure to US or Canadian privacy, consumer protection or advertising requirements is desirable
• Experience reviewing commercial contracts or managing contract lifecycle processes is desirable
• Experience with trademark portfolio administration, brand protection or online enforcement is desirable

Core Competencies

Demonstrates extensive experience in privacy and data protection, including managing legal workflows, vendor assessments, and compliance with privacy regulations across multiple jurisdictions. Strong ability to communicate complex legal concepts to non-legal stakeholders while maintaining high ethical standards.

Highest-signal resume keywords

• Privacy Programme Management
• Data Protection Impact Assessments (DPIAs)
• Vendor Assessments and Data Processing Agreements (DPAs)
• Stakeholder Management
• Legal Compliance and Regulatory Knowledge

Hard Skills

• Privacy Risk Assessments
• Contract Lifecycle Management
• Incident Response Coordination
• Records of Processing Management
• Data Subject Rights Management
• Commercial Contract Review
• Trademark Portfolio Administration
• E-commerce Legal Compliance
• Consumer Protection Regulations
• Legal Document Drafting

Soft Skills

• Strong Written and Verbal Communication
• Excellent Organisation and Prioritisation
• Commercial Judgement
• Stakeholder Influence
• Professional Ethics and Integrity

Certifications & Qualifications

• CIPP/E
• CIPM

Industry Keywords

• In-House Legal Experience
• Privacy Compliance
• Consumer Health Regulations
• D2C E-commerce
• Regulated Consumer Categories

Tools & Technologies

• Marketing Technology
• Customer Relationship Management (CRM)
• Analytics Tools
• AI Tools for Workflow Improvement