Senior Privacy Counsel (Fintech)

TL;DR

Senior Privacy Counsel (Fintech): Serving as hirify.global's specialist privacy adviser for the UK region, providing specialist guidance on complex privacy matters. Focus on ensuring compliance with GDPR, UK GDPR, Data Protection Act 2018, ePrivacy Directive, and national data protection laws across EU member states.

Location: Hybrid, London, United Kingdom

Company

hirify.global is a global leader in Open Banking Payments, establishing Pay by Bank as the new standard at checkout.

What you will do

• Work closely with Product Counsel across the EU and UK region, serving as the specialist privacy adviser on complex privacy matters, regulatory queries, and high-risk data processing activities.
• Develop and execute hirify.global's privacy and data protection strategy for the EU and UK region, ensuring compliance with GDPR, UK GDPR, Data Protection Act 2018, ePrivacy Directive, and national data protection laws across EU member states.
• Conduct and oversee privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) for new products, services, features, and business initiatives.
• Manage data subject rights requests and handle data disclosure requests from law enforcement authorities, ensuring timely and compliant responses.
• Lead privacy breach preparedness and incident response efforts for the EU and UK region, including developing incident response plans, coordinating breach investigations, and managing regulatory notifications.
• Develop and maintain privacy documentation, including data inventories, records of processing activities, and privacy compliance registers.

Requirements

• Law degree (LLB, LLM, or equivalent) and qualified solicitor, barrister, or equivalent legal qualification in an EU member state or the UK, with 7-10 years of experience as a privacy lawyer at a technology company, including strong training at a reputable law firm.
• Proven experience in a consumer-facing environment, with deep understanding of consumer privacy expectations and regulatory requirements in the FinTech or payment services sector.
• Deep expertise in EU and UK privacy laws and regulations, including GDPR, UK GDPR, Data Protection Act 2018, ePrivacy Directive, and national data protection laws across EU member states, with the ability to advise on novel and complex EU and UK privacy issues without external support.
• Experience advising on cross-border data transfers using standard contractual clauses, adequacy decisions, binding corporate rules, and other transfer mechanisms.
• Exceptional interpersonal and communication skills with the ability to explain complex legal issues in simple terms, strong understanding of international privacy frameworks, and experience managing data breach incidents including regulatory notifications to supervisory authorities.
• Willingness to work flexible hours to collaborate with global privacy team members across different time zones and travel occasionally for meetings.

Nice to have

• Relevant professional privacy certifications (e.g., CIPP/E, CIPM, CIPT) are highly desirable.

Culture & Benefits

• 20 to 30 days of holiday to support a healthy work-life balance.
• Monthly team outing allowance to enjoy social events with your colleagues.
• Parental leave top-up additional support for new parents.
• On-site perks to make your workday smoother.
• Well being support our health allowance covers gym memberships, massages, and much more to help you feel your best.