Privacy Counsel - UK (AI/Data Security)

Location: London, UK; hybrid working from the London base

Company

Cyera builds AI trust infrastructure and data security solutions that help enterprises adopt AI securely.

What you will do

• Maintain data inventories, records of processing, data-flow documentation, retention schedules, privacy notices, internal policies, procedures, and training.
• Conduct and document PIAs, DPIAs, and TIAs; partner with Product and Engineering on privacy-by-design for new features, including AI-related functionality.
• Track GDPR, UK GDPR, CCPA/CPRA, US state, and international privacy obligations and translate changes into controls, policies, and processes.
• Manage subprocessor reviews and disclosures, data subject requests from intake through response, and privacy incident response with Legal and Security.
• Handle customer and vendor privacy questionnaires, RFP privacy sections, DPAs, and privacy terms with customers, partners, and vendors.
• Advise Product, Sales, Marketing, HR, IT, Security, and Legal colleagues with practical, risk-based privacy guidance.

Requirements

• Qualified to practice law in England & Wales or another European jurisdiction, with 4–5 years of post-qualification experience advising on privacy and data protection.
• Solid practical and commercial knowledge of GDPR and UK GDPR, plus familiarity with CCPA/CPRA and other US state and international privacy laws.
• Hands-on experience with RoPA, data mapping, retention, privacy notices, and PIAs, DPIAs, and TIAs.
• Familiarity with SaaS, security products, and related privacy issues.
• Experience handling data subject requests, vendor and subprocessor reviews, and DPA review and negotiation.
• Ability to convert legal requirements into clear guidance and process changes for Product, Engineering, and business teams.
• Strong organization, communication, judgment, and ability to manage multiple projects and deadlines while working independently.
• Excellent written and verbal English; proactive, solution-oriented, and comfortable in a fast-paced environment.

Nice to have

• In-house experience at a technology, SaaS, data security, or cloud company, including familiarity with cloud environments and data security concepts.
• Experience with customer security and privacy questionnaires, RFPs, trust, or GRC functions.
• Exposure to AI governance and emerging regulation, including the EU AI Act.
• Privacy certification such as CIPP/E, CIPM, or CIPT.
• Experience with privacy or contract management tools, including privacy management platforms or CLM systems.

Culture & Benefits

• Hybrid work from the London base.
• Competitive salary and equity.
• Generous PTO, paid holidays, and sick time in line with statutory and local requirements.
• Health, dental, vision, life, and disability insurance or applicable local equivalents.
• Opportunity to build and shape the privacy program at an AI and data security company.