Fractional Data Privacy Specialist

About the role

You'll be Jigsaw's embedded data privacy advisor: the person product development and customer-facing teams turn to when a data or privacy question needs a real answer. This is a fractional role (starting at roughly 1-2 days a week in-office), working closely alongside our existing Legal team.

The focus for this role will be translating legal and technical complexity into commercially-focused, actionable responses to help free up teams to move quickly. In practice, this could be advising the product team on what compliance actions we need to take ahead of a new product release, making case-by-case decisions for customers with unique compliance requirements, or conducting analysis on customer DPAs ahead of a change to data processing locations, right through to how to answer a client's questions about our AI features.

This isn't a standardise-everything-and-leave role. We work with customers around the world in regulated industries (legal, financial institutions, accountancy and enterprises) with varying compliance needs, where one-size-fits-all templates aren't always an option and we need to adopt a flexible approach. The work here is genuinely ongoing, nuanced, and advisory rather than a project with an end date.

You'll get to

• Act as the go-to person for data and privacy questions across the business - in product meetings, customer rollout calls, and migration conversations
• Turn specific customer contract terms into practical, commercial recommendations, weighing real risk instead of defaulting to "no"
• Advise on cross-border and international data transfer questions, which come up constantly given our global customer base
• Join customer calls to speak credibly with clients' own data privacy counsel, many of whom are lawyers or privacy specialists themselves
• Translate complex legal and technical concepts clearly for non-legal, technical teams internally
• Help build a genuine "privacy by design" culture at Jigsaw - getting privacy thinking embedded at the start of projects, not bolted on at the end
• Spot opportunities to improve our templates, playbooks, and processes proactively, alongside the day-to-day reactive work

You'll need

• A working understanding of UK & US privacy laws, including UK & EU GDPR, the UK Data Protection Act and CCPA, ideally with experience applying them in a live commercial context, not just in theory
• Genuine on-the-ground experience inside a tech company building product - this isn't a fit for a purely private-practice legal background
• To be genuinely comfortable with cross-border and international data transfer questions
• To be a commercial, pragmatic, solution-minded operator - someone who can weigh the significance and likelihood of a risk and propose a workable path forward, not someone who leads with compliance-first blockers
• Excellent communication skills on two levels: credible and precise with legally sophisticated clients, and clear and accessible for non-legal internal teams
• High ownership balanced with genuine collaboration, and able to build consensus
• Comfort with a fractional working pattern - broadly protected days, with the pragmatic flexibility to handle something urgent (like a data incident) outside them

Nice-to-haves

• Familiarity with other privacy frameworks, including AI governance or AI-related compliance questions
• CIPP/E or CIPM certification
• Experience working with clients in heavily regulated industries (law firms, accountancies, financial services)
• Prior experience at a similar-stage scale-up with a broad base of regulated, legally sophisticated customers

Location: London

Employment Type: Contract

Location Type: Hybrid

Department: Operations