In-house (Charity) Head of Data & Info Lawyer (Leeds/Remote)

My client, a major national UK charity seeks a specialist senior lawyer at minimum 10 years PQE (of UK experience) to head the data and information governance approach for the organisation.

This is a newly created role to provide senior legal advice across the Charity's information governance, data protection, privacy, cyber, AI and information rights landscape, ensuring compliance and managing regulatory and reputational risk, in order to support strong governance across the organisation.

The successful lawyer will:

• Manage legal risk associated with data protection compliance, statutory information rights requests, privacy, AI adoption, cyber incidents, personal data breaches, regulatory complaints, ICO engagement, statutory disclosure obligations, reputational exposure and potential regulatory enforcement.
• Support the reduction in external legal spend by bringing specialist information governance, privacy, data protection, AI and cyber legal advice in-house
• Work collaboratively within a sizeable legal team, and closely with the Information Governance team, DPO, IT, cyber/security colleagues and operational teams.

Key responsibilities will include:

• Acting as the Charity's most senior legal adviser on information governance, data protection, privacy, cyber, AI and information rights law (including UK GDPR, Data Protection Act 2018, Freedom of Information Act 2000 and Environmental Information Regulations 2004).
• Advising the Charity, including the SLT, on complex information governance risk, statutory disclosure obligations, privacy compliance, data processing, data sharing, cyber incidents, AI adoption and regulatory exposure.
• Advising on data protection impact assessments, privacy-by-design, data processing agreements, data sharing agreements, controller/processor arrangements, joint controller arrangements, privacy notices and lawful use of personal data across Charity activities.
• Advising on AI, digital, cyber and information security matters, including privacy risks arising from new systems, AI-enabled tools, automated processing, data leakage, cyber incidents, emerging technology adoption and associated governance controls.
• Supporting the Charity's response to personal data breaches, cyber incidents, complaints, ICO enquiries, regulatory engagement and information rights challenges, ensuring proportionate and compliant handling.
• Advising on complex, sensitive or high-risk subject access requests, FOI requests, EIR requests, internal reviews, complaints and appeals, including application of exemptions, exceptions, redactions, disclosure risk and statutory decision-making.
• Supporting the DPO and Info Governance team on regulatory compliance, risk escalation, statutory records, DPIAs, breach records, data sharing records, ICO correspondence and evidence of compliance.
• Supporting the development of the requisite governance frameworks, policies, procedures, templates and training to strengthen information governance compliance, improve consistency and reduce legal and regulatory exposure.
• Monitoring legislative, regulatory and technological developments in information governance, data protection, AI, privacy and cyber risk, identifying emerging risks and advising on implementation of required change.

You will be a UK qualified lawyer with significant relevant experience, (a minimum of 10+ years PQE, gained within the UK ) gained either in private practice, public sector or in-house.

On top of the basic salary (to a maximum basic of £75,000 per annum) and an excellent benefits package, you will benefit from a collegiate and remote working environment (the team have non-obligatory face-to-face team meetings each year).

To learn more about this role, please send your CV to Adele Callaghan (specifying full details of your current remuneration package) or email me for a return call to discuss the role.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays