Solicitor, Commercial, Technology and Data, VP

The role will support the business across a broad range of commercial contracting, technology and data protection matters, with increasing exposure to AI governance and data driven initiatives and will work closely with the UK Data Protection Officer (DPO) supporting UK Data Protection Office work.

This is a hands-on, business facing role, suited to a solicitor who is comfortable managing matters independently with appropriate supervision, while contributing collaboratively within a growing specialist legal team.

Key Objectives and Primary Goals

• Commercial Contracting
• Drafting, reviewing and negotiating a range of commercial contracts, including
• General commercial supplier and customer agreements
• Professional services and consultancy agreements
• Framework agreements, statements of work and amendments
• Managing contracts across the low to high value spectrum, applying a risk-based and proportionate approach.
• Providing clear, commercially pragmatic advice to business stakeholders.

Technology & IT Contracts

• Advise on and negotiate technology-related agreements, including

• Software and SaaS agreements
• IT services and technology-enabled commercial arrangements

Identify and manage legal risk relating to technology, outsourcing and digital service delivery.

Data Protection & Privacy

• Support the UK DPO in delivering the organisation’s data protection and privacy compliance framework, including

• Drafting and negotiating data processing and data sharing agreements, and data protection provisions of commercial contracts
• Advising on controller/processor roles and allocation of responsibilities
• Responding to DSARs, assisting with regulatory enquiries and internal data protection initiatives.
• Assisting with the investigation, assessment and maintenance of a log of personal data breaches
• Assisting to maintain data processing records for SG UK entities (DPRs)
• Assisting BU and SU stakeholders to complete Data Protection Impact Assessments
• Supporting international data transfer arrangements (e.g. IDTAs, TRAs)
• Assisting with Group reporting and data protection risk assessments, such as RAMOS and DataGo
• Helping monitor compliance with internal data protection policies and procedures, including helping to develop and deliver training to internal stakeholders.

Draft template legal documentation, policies, procedures and guidance notes relating to Data Protection.

Track regulatory and guidance developments relevant to data protection and summarise key points for the Team.

AI Governance & Emerging Technologies

• Support legal oversight of AI and data-driven technologies, including

• Contractual considerations relating to use of AI tools and systems
• Allocation of risk for AI outputs and data usage

Supporting implementation of internal AI governance and acceptable use frameworks

Monitor relevant legal and regulatory developments and support internal guidance.

• English law-qualified solicitor.
• Mid-level PQE, gained in private practice, in-house, or a combination of both.
• Strong experience in commercial contract drafting and negotiation.
• Practical working knowledge of UK GDPR and data protection law in a commercial context.
• Ability to provide clear, pragmatic, business-focused advice.

Desirable

• Experience advising on technology or IT-related contracts.
• Exposure to AI-related legal or governance issues, or a strong interest in this area.
• In-house experience within a regulated or complex organisation., * Commercial, pragmatic and solutions-focused, with a proactive approach to risk and problem-solving.
• Confident managing matters independently with appropriate supervision and escalation.
• Strong written and verbal communication skills, with the ability to establish credibility quickly with internal stakeholders.
• Collaborative team player, willing to support team development and knowledge-sharing.
• Maintains high professional standards with strong attention to detail, organisation and time management.
• Keeps abreast of legal and regulatory developments in contract, data protection and AI, and assesses their impact on the business.