Assistant General Counsel, Dow Jones

• You are a qualified solicitor or barrister in England & Wales with 8-10 years PQE (or equivalent experience) in privacy and data protection law
• You have a strong understanding of UK GDPR, EU GDPR, and global data protection frameworks, with the ability to translate legal requirements into business solutions
• You use data-driven insights, audits, and risk assessments to develop and implement privacy strategies
• You have strong stakeholder management skills and can effectively engage, educate, and influence teams across the organisation
• You understand privacy-enhancing technologies, data security protocols, and marketing compliance
• You are skilled in negotiating data protection contracts and vendor agreements

Desirable

• As Assistant General Counsel, Privacy, you will play a key role in shaping Dow Jones' global data protection strategy and ensuring compliance with UK, EU, and international privacy regulations
• Based in our London office, you will serve as the Data Protection Officer (DPO), working closely with cross-functional teams to embed a culture of data protection across the organisation
• You will act as a strategic advisor, translating complex legal and regulatory requirements into practical, business-friendly solutions
• Your expertise will help ensure compliance, risk mitigation, and ethical data use, all while supporting business innovation
• You will report to the Chief Privacy Officer, based in New York City
• Develop and implement privacy frameworks to ensure compliance with UK GDPR, EU GDPR, and global data protection laws
• Monitor and analyse evolving privacy regulations, assessing their impact on the business and providing data-driven recommendations
• Conduct Data Protection Impact Assessments (DPIAs) and implement Privacy by Design and Privacy by Default principles across all business functions
• Lead privacy audits and maintain Records of Processing Activities (ROPA) to ensure robust governance
• Champion Data Protection & Stakeholder Engagement
• Foster a culture of data protection awareness across all levels of the organisation, delivering training and guidance to internal teams
• Act as the primary contact for data protection authorities, managing regulatory engagement with transparency and compliance
• Partner with internal legal, compliance, technology, marketing, sales, and customer service teams to align business objectives with privacy standards
• Provide expert guidance to leadership teams, ensuring the ethical and compliant use of data in decision-making
• Manage Risk & Strengthen Governance
• Identify and escalate privacy risks, implementing proactive risk mitigation strategies
• Develop and oversee processes for data subject access requests (DSARs) to ensure timely and compliant responses
• Work closely with IT and cybersecurity teams to enhance data security and incident response protocols
• Manage relationships with third-party vendors and partners, ensuring compliance with data processing agreements (DPAs) and cross-border data transfer frameworks
• You will be part of a forward-thinking Legal & Compliance team, working alongside industry experts in media law, data privacy, corporate governance, and regulatory compliance