Data Risk Officer

I’m currently working with a prestigious international law firm that’s hiring a Data Risk Officer to join their Data Risk Team within Risk & Compliance. The role can be based in London, Edinburgh, Chelmsford, or Manchester.

The team specialises in risk to data, privacy and information as well as compliance with associated regulations and best practise globally. This includes keeping abreast of new and emerging risks associated with ever developing technology such as AI.

Summary of Responsibilities

• Support data protection compliance (GDPR, DORA, HIPAA) and risk reduction.
• Assist with audits, cyber incident response, and privacy documentation.
• Contribute to ISO 27001 audits and phishing exercises.
• Collaborate on AI and emerging tech compliance.
• Coordinate data requests and advise on information barriers.
• Ensure alignment with client and regulatory standards.

Required Experience

• Degree-level education.
• 2-5 years in data protection, risk, or compliance.
• Knowledge of GDPR, DORA, HIPAA, and risk frameworks (ISO 27001, ERM).
• Strong stakeholder engagement and communication.
• Professional services experience is a must (law firm experience is a plus.)

Please note our advertisements use PQE/salary levels purely as a guide. However we are happy to consider applications from all candidates who are able to demonstrate the skills necessary to fulfil the role.

Please note that your personal information will be treated in accordance with our Privacy Policy.