Privacy Associate (Dublin / London)

Kroll Bond Rating Agency Europe Limited/Kroll Bond Rating Agency UK Limited and its affiliates (“KBRA”) are seeking a Privacy Associate to join its Legal Department. You will be enthusiastic, highly motivated, have a strong work ethic, and be well-equipped to work closely with other members of the Legal Department on privacy, data protection, and contract-related matters. The position will be based out of our Dublin or London office.

The Legal Department handles all of KBRA’s legal matters with the exception of ratings. The Legal Department works with analysts, compliance, finance, technology, and senior management across the company.

As Privacy Associate, your responsibilities will primarily focus on privacy and data protection issues as well as contract drafting, reviewing, and negotiation. Specific responsibilities may include:

• Advising on international data privacy and cybersecurity laws/regulations (including GDPR, UK GDPR, ePrivacy Directive, CCPA/CPRA, etc.).
• Assisting in the enhancement, implementation, and ongoing maintenance of privacy, data protection, and cybersecurity policies and practices across KBRA.
• Conducting and advising on privacy impact assessments, legitimate interest assessments and assisting with vendor and third-party due diligence, and issues related to cross-border data transfers.
• Supporting records of processing activities.
• Assisting with incident/breach response, coordinating with Technology, Information Security, Legal, and Compliance and other internal stakeholders.
• Drafting, reviewing, and negotiating contracts and clauses relevant to privacy, including data processing agreements.
• Drafting, reviewing, and negotiating vendor and service provider contracts, client engagement letters, subscription agreements, and technology/service agreements.
• Providing privacy-related input into contract review workflows and advise internal teams on risk allocation and compliance.
• Monitoring and tracking developments in privacy, data protection and AI, including enforcement, guidance updates, and standards in Ireland, UK, EU, and other relevant jurisdictions.
• Reviewing and updating privacy notices and policies.
• Keeping up to date with technology trends, including AI, and technology in use at KBRA and how they interact with privacy laws.
• Liaising with external regulators, legal advisors, and auditors as needed.
• Delivering training and awareness programs on privacy and data protection for internal teams.
• Acting as a resource for internal teams with respect to privacy-related and other legal questions.
• Contributing to corporate governance on privacy matters, including preparing board or committee materials where required.

You will collaborate closely with cross-functional teams (Compliance, Technology, Marketing, Business Development), as well as external counsel and regulators, as needed.

You will be successful in this role if you have:

• Bachelor’s degree in a related field required.
• 4-8 years post-qualification experience, specifically with hands-on exposure to privacy/data protection law.
• Strong experience with drafting, negotiating, and reviewing contracts, especially with privacy-sensitive clauses (DPAs, vendor agreements, client contracts, etc.).
• Demonstrated knowledge of GDPR (EU & UK), cross-border data transfer mechanisms (e.g. Standard Contractual Clauses, Binding Corporate Rules, etc.), ePrivacy laws, vendor/third party risk, and cybersecurity basics.
• Excellent verbal and written communication skills.
• Ability to explain legal and technical privacy concepts to non-legal stakeholders.
• Strong research, analytical, organisational, and project management skills, with great attention to detail.
• Able to manage multiple matters/tracks simultaneously under tight deadlines.
• Experience working in regulated environments is an advantage (financial services, tech, data/analytics, etc.).
• IAPP certification (CIPP/E, CIPP/US, CIPM, or equivalent) is a plus.

Benefits:

• A flexible hybrid work schedule – Tuesdays, Wednesdays, Thursdays in the office.
• Competitive benefits and paid time off.
• Pension plan.
• Educational and professional development financial assistance.
• Employee referral bonus program.

Kroll Bond Rating Agency, LLC (KBRA) is a full-service credit rating agency registered with the U.S. Securities and Exchange Commission as an NRSRO. Kroll Bond Rating Agency Europe Limited is registered as a CRA with the European Securities and Markets Authority. Kroll Bond Rating Agency UK Limited is registered as a CRA with the UK Financial Conduct Authority pursuant to the Temporary Registration Regime. In addition, KBRA is designated as a designated rating organization by the Ontario Securities Commission for issuers of asset-backed securities to file a short form prospectus or shelf prospectus. KBRA is also recognized by the National Association of Insurance Commissioners as a Credit Rating Provider. Kroll Bond Rating Agency UK is located at 1st Floor, Marble Arch House, 66 Seymour Street, London W1H 5BT, England.