Risk Manager (Data protection)

A leading law firm in London is seeking a knowledgeable and considerate Risk Manager with a focus on Data Protection to join their collaborative Risk Team. This is an exceptional opportunity for you to play a pivotal role in shaping the firm's approach to risk, compliance, and data security, while working closely with senior stakeholders and supporting the professional growth of junior colleagues.

Role responsibilities:

• Support the Director of Risk by delivering comprehensive risk management and compliance services with a particular emphasis on data protection and information security.
• Manage complex data-related issues such as subject access requests, client file requests, and the handling of data breaches with sensitivity and attention to detail.
• Conduct impact assessments and legitimate interest assessments for new business initiatives to ensure robust compliance with relevant regulations.
• Maintain up-to-date Registers of Processing Activities as well as data protection policies and procedures to ensure ongoing adherence to legal standards.
• Design and deliver engaging departmental training sessions that raise awareness of firm policy and encourage widespread compliance among staff.
• Collaborate closely with divisional leads and business leaders to provide expert advice on all aspects of data, risk, and compliance related to new projects or initiatives.
• Produce detailed reports monitoring data trends in order to identify opportunities for improvement in current data security arrangements.
• Monitor changes in legal and regulatory requirements affecting the operation of the firm, interpreting these changes for practical application within the business context.

Requirements:

• Proven experience working within risk management or compliance functions in a law firm environment where collaboration is key.
• Expert knowledge of laws, regulations, and codes of conduct applicable to law firms-including legal privilege-and their practical application within daily operations.
• In-depth understanding of data protection legislation (such as GDPR) alongside information security best practices relevant to professional services settings.
• Excellent communication skills demonstrated through clear report writing as well as the ability to explain complex concepts sensitively to diverse audiences.
• Demonstrated capability in coaching or mentoring others-supporting their development through encouragement and shared learning experiences.

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates