Senior Data Protection Specialist

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.

Short Description

Function: General Counsel 

Reports to: Global Data Protection Director

Set up: hybrid

Location: London, UK

Why we need this role

The Senior Data Protection Specialist provides senior-level legal and practical advice on UK GDPR, EU GDPR and international privacy requirements, including Colt's Binding Corporate Rules. The role supports the delivery of the global Data Protection Programme, AI and digitalisation initiatives, regulatory projects and privacy-by-design across the business.

The role reports directly to the Global Data Protection Director. It is a senior individual-contributor role with responsibility for leading assigned matters and delivering high-quality work. The successful candidate will be comfortable working in an environment characterised by evolving business priorities and a broad variety of data protection matters across multiple jurisdictions. The role requires close alignment with the team, the Director and the global Data Protection framework, while contributing proactively to the overall success of the function.

What you will do

• Provide expert, pragmatic and regulator-defensible advice on UK GDPR, EU GDPR, and international privacy laws.
• Lead and deliver DPIAs, TIAs, privacy risk assessments and privacy-by-design reviews for complex projects.
• Draft, review and negotiate data processing agreements, international transfer mechanisms, and related governance documents.
• Advise Product, Technology, Security, Procurement, HR, Sales and Legal stakeholders on privacy requirements and practical solutions.
• Support AI tools, automation, digital transformation and customer-facing AI initiatives from a privacy and governance perspective.
• Lead and manage vendor privacy assessments.
• Support the digitalisation of Data Protection processes and tools.
• Support data incident investigations, breach assessments, remediation and preparation of regulatory documentation.
• Support audits, regulatory projects, training and continuous improvement of policies, procedures, templates and controls.
• Developing and delivering training programs to educate employees about data protection principles, policies, and best practices.
• Provide Data Protection advice and governance oversight on Data Subject Access Requests (DSARs), supporting the business in meeting its obligations while maintaining appropriate accountability within the relevant functions.
• Monitor relevant regulatory developments and recommend appropriate implementation actions.
• Strong team player, with a collaborative, supportive and constructive working style with the team.

What we look for

• 7-10 years of relevant professional experience in data protection, privacy law or regulatory compliance, including work in an international environment.
• Strong practical knowledge of UK GDPR, EU GDPR, international transfers and complex multi-jurisdictional privacy matters.
• Proven experience leading DPIAs, TIAs, privacy-by-design reviews, vendor assessments and complex stakeholder advice.
• Experience with technology, digitalisation, AI governance, product privacy or processor services.
• Excellent drafting, analysis, negotiation, communication and problem-solving skills.
• Fluent written and spoken English. An additional European language is desirable.
• A legal qualification or equivalent senior privacy experience. CIPP/E, CIPM, AIGP or an equivalent certification is strongly desirable.
• Strong team player, with a collaborative, supportive and constructive working style.
• High level of personal accountability, ownership and follow-through on assigned workstreams.
• Ability to proactively drive progress, coordinate stakeholders and move matters forward without requiring constant day-to-day direction.
• Ability to prepare clear, practical and well-structured recommendations for decision-making.
• Ability to manage competing priorities, tight deadlines and significant workloads while maintaining accuracy and professional standards.
• Strong communication skills, including the ability to engage effectively with senior stakeholders.
• Practical problem-solving mindset, with the ability to propose workable solutions rather than simply identify issues.
• Strong drafting skills and ability to produce clear, regulator-ready documentation, recommendations, records and governance materials.

Skills

Regulatory Compliance

Data Protection Strategic Planning

Data Protection Concepts

General Data Protection Regulation (GDPR)

Due Diligence

Education

A bachelor’s or master’s degree in law or a relevant field

What we offer:

Colt is a growing business that is investing in its people. We offer skill development, learning pathways and accreditation to help our people perform at their best, regardless of role and location. The company supports diversity and inclusion in the workplace and has signed Diversity Charter.

In addition to offering competitive salaries and incentive plans, a range of benefits and local rewards packages are offered to staff. Colt recognises the importance of a work life balance.

Some benefit examples are:

• Relaxed dress code
• Two days annually to spend on volunteering opportunities
• 39 hours working week and additional days off as per Colt own collective bargaining agreement
• Benefit package that includes life insurance, private health insurance and pension plan. In addition flexible benefits scheme
• Lunch vouchers or childcare vouchers
• Access to a virtual business school for on-going learning
• Business mentoring
• International environment with employees from more than 35 different nationalities

We strongly encourage candidates of all different backgrounds and identities to apply. We are committed to making Colt an inclusive and supportive workplace