Legal Counsel, Privacy & Security

Position: Counsel, Privacy & Legal Information Security 

Reports to: Deputy General Counsel/DPO, Privacy and Legal Information Security  
Location: London, UK (Office 3/5 days) 

Job Description 

Core Responsibilities 

• Handle privacy and information security-related inquiries from a wide range of groups across the company and provide actionable advice and legal counsel to facilitate privacy and information security compliance with the Company’s policies, standards and applicable laws and best practices. 

• Evaluate various Comcast programs and initiatives considering applicable privacy and information security requirements. 

• Work closely with enterprise and business unit stakeholders to embed privacy and information security principles into business plans and strategic initiatives during the design and execution process. 

• Assist in the creation, maintenance and implementation of policies, processes, data inventories and records of processing, and associated documentation relating to processing of data. 

• Review of company practices to ensure consistency with existing policies and other internal privacy and information security governance documents. 

• Monitor, summarize and help to implement relevant requirements driven by developments in privacy and information security related laws, regulations, standards, and best practices in the UK, EU and other international jurisdictions as needed (such as GDPR, ePrivacy Directive, NIS2, Cyber Resilience Act, and self-regulatory organizations such as DAA and NAI). 

• Provide practical, proactive legal counsel on privacy and information security issues, including data governance, data retention, data minimization, and incident response matters. 

• Advise on post-acquisition privacy and information security integration efforts for newly acquired entities. 

• Assist with Privacy Impact and Risk Assessments relating to new businesses and initiatives involving processing of personal information. 

• Conduct awareness and training efforts as needed and/or required to increase employee understanding of company privacy policies, data handling and information security practices and procedures, and legal obligations. 

• Support the work of the Data Protection Officer. 

• Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences. 

• Drive results and growth. 

• Support a culture of inclusion in how you work. 

Skills and Experience: 

• A minimum of 3-5 years combined legal experience at a top law firm and/or in-house legal department, with at least 1-3 years of privacy and information security experience. 

• Experience with the details and practical application of current European and UK privacy and information security legislation, including an in depth understanding of the GDPR, experience with the ePrivacy Directive, NIS2, the Cyber Resilience Act, and other related laws. Experience with additional global privacy and information security laws and operating within a global privacy framework preferred. 

• Demonstrated transactional experience, including reviewing, drafting and negotiating privacy and data protection contract terms and agreements, data processing, usage, information security and/or transfer agreements. 

• Experience with conducting privacy impact assessments and advising on applicable privacy and information security legal requirements. 

• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance.  

• Ability to manage multiple projects and meet deadlines with consistently high-quality results. 

• Ability to work independently with moderate supervision. 

• Ability to work effectively with colleagues, management, and operations personnel. 

• A pragmatic, risk-based approach and collaborative mindset.  

• Strong academic credentials. 

• Regular, consistent, and punctual attendance.  

• Recognised privacy or cyber security qualification such as CIPP/E or equivalent would be preferable.  

• Experience with privacy management platforms and familiarity with productivity tools such as Copilot and Harvey would be advantageous.  

• This position is based in London, with some potential European and US travel required. 

Disclaimer: 

• This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications. 

Comcast is an EOE/Veterans/Disabled/LGBT employer