Data Legal Counsel

Job Description:

Responsibilities

• Development and implementation of best practice legal strategies for risk management and compliance.
• Legal advice and support to the business on cybersecurity, data privacy, intellectual property (IP) and emerging tech matters, including cybersecurity and data privacy incidents, IP protection and technology deployment.
• Representation of the bank in legal proceedings related to cybersecurity, data privacy, IP protection and emerging tech, such as litigation, arbitration, and regulatory investigations.
• Creation and review of legal documents such as data protection policies, cybersecurity protocols, IP licenses and emerging tech policies to ensure compliance with applicable laws and regulations.
• Legal research and analysis to stay up to date on changes in laws and regulations that may impact the bank's cybersecurity, data privacy, IP protection and emerging tech practices.
• Developing and delivering training programmes to educate employees on legal and regulatory requirements related to cybersecurity, data privacy, IP protection and emerging tech.
• Pro-active identification, communication, and provision of legal advice on applicable laws, rules and regulations (LRRs). Keeping up to date with regards to changes to LRRs in the relevant coverage area. Ensuring that LRRs are effectively allocated to, and adequately reflected within, the relevant policies, standards and controls.

Qualification & Experience

• Bachelors or Masters degree in Law and a qualified lawyer in India with a tenured experience, preferably in an established global financial institution or law firm.
• Demonstrate legal risk management and communication skills including experience with managing multiple stakeholders and be a pro-active team player.
• Highly motivated and ability to deliver quality work independently and consistently.
• Desirable skillsets/ good to have:
• Strong ability to grasp new areas of law, and laws of non-India jurisdictions (or jurisdictions other than the “base” jurisdiction(s) of qualification) quickly.
• Adaptable and able to tackle a wide variety of issues – proactively seek solutions and offer solutions/recommendations.
• Genuine interest in this area of the law and has exposure to topical developments in regulatory changes and development in Asia.
• Some experience with US, EU and/or Asia data-related regulation.
• Demonstrates a solid understanding of GDPR and India Digital Personal Data Protection Act and Rules.  
• The following qualifications / certifications are preferred: CIPP (IAPP) - CIPP/A and/or CIPP/E; CIPM or CIPT; and ISO 27001 or equivalent privacy/security certifications.