Enforcement Lawyer - Specialist in Data Management / Policy

The Financial Reporting Council (FRC) mission is to serve the public interest by setting high standards of corporate governance, reporting and audit and holding to account those responsible for delivering them. We are the UK Competent Authority for audit. We also set the UK Corporate Governance and Stewardship Codes as well as UK standards for accounting, auditing and actuarial work, and monitor and take action to promote the quality of corporate reporting and operate independent enforcement arrangements for accountants and actuaries.

As the UK Competent Authority for audit, the FRC’s Enforcement Division conducts investigations and takes enforcement action into breaches of audit standards under the Audit Enforcement Procedure (AEP). The Division is the independent disciplinary body for the accountancy and actuarial professions in the UK, undertaking professional disciplinary investigations and enforcement action under the Schemes in cases involving accountants, accountancy firms and actuaries with implications for the public interest in the UK.

The role will include:

• Assisting the Enforcement Division’s Information Asset Owner and data management team with high-quality, practical legal advice and analysis on data management and related policy considerations.
• Supporting the development and implementation of the Enforcement Division’s data management policy and strategy and ensuring compliance with all applicable data protection laws and regulations.
• Understanding and demonstrating best practice in complying with applicable laws, regulations and internal policies for the protection of personal, confidential and/or sensitive data.
• Leading workstreams to implement updates to the Enforcement Division’s suite of policies and procedures on data management and related topics.
• Drafting practical advice and guidance for Enforcement case teams on data management and related topics arising from new and proposed legislative changes.
• Engaging with and working alongside lawyers from the FRC’s Legal Services Team and the FRC’s IT experts as required.
• Engaging with Government Departments, other regulators and other agencies on legal and policy issues relating to data management as required.
• Preparing and delivering training and presentations to Enforcement team members.
• Instructing specialist counsel to advise on legal questions relating to data management of high complexity or risk.

You will work as part of a multi-disciplinary team, alongside forensic accountants, lawyers, and legal assistants on data management and related policy issues in the context of supporting the delivery of complex regulatory investigations. The role is accountable to the Enforcement Division’s Information Asset Owner, the Senior Leadership team and senior lawyers. The role will also involve collaboration and engagement with colleagues in many of the FRC’s other Divisions including the Legal Services Team.

The successful candidate must be a solicitor or barrister fully qualified to practice in England and Wales (or another Common Law jurisdiction with demonstrable experience in the UK) with significant experience (typically in excess of six years). They will have significant experience advising on laws and regulations for the protection of personal, confidential and/or sensitive data as well as best practice in complying with the same.

They will have sound knowledge of current issues and trends in the field and experience of completing, and best practice for, data impact assessments and responding to FOIA requests and SARs. Preferably this experience will have been gained within the context of working within a division or team carrying out law enforcement or regulatory investigations.

Alternatively, candidates should have previous experience working or acting for a prosecuting authority, regulator or disciplinary body with an enforcement/investigation function, in addition to experience of providing legal advice in respect of applicable data protection laws and regulations.

Candidates will be expected to demonstrate the following competencies:

• Excellent legal and technical skills in the areas outlined above
• Excellent analytical skills and judgement
• Ability to support organisations in robustly evaluating and addressing data management risks in an enforcement/investigation context
• Excellent written and oral communication and interpersonal skills
• Ability to collaborate effectively in a multi-disciplinary environment
• Determination and self-motivation to pursue matters, make well-reasoned suggestions and propose solutions
• Effective project management and organisational skills
• Strong legal research skills and excellent IT skills

The post holder should be able to work flexibly to support the team’s activities. The FRC operates a hybrid working arrangement with its workforce, with precise arrangements to be agreed between the employee and the line manager. FRC has a minimum 40% office attendance requirement equating to 2 days a week in a full-time role.

The FRC offers remuneration packages, including 30 days annual leave, flexible bank holidays plus ability to buy extra leave. Generous employer pension contribution of 10%. Staff Employee Assistance Programme including confidential counselling and work-life services. The FRC has a strong work/life balance ethos.

The FRC believes that equality of opportunity and diversity is important in the work that we do and we are strongly committed to being an inclusive employer. Our values of being fair and independent supports this commitment. We welcome applicants from all backgrounds and communities, and in particular those that are currently under represented in our workforce.

Please apply by following the link on our website www.frc.org.uk/frc-for-you/careers and uploading a copy of your CV and covering letter as a single document upload.