Legal Counsel

Job Description:

Responsibilities

• Provide assurance of privacy compliance with global and regional regulations (including applicable data protection and privacy laws across the Asia-Pacific region, such as the Singapore PDPA, Australia Privacy Act, Hong Kong PDPO, Japan APPI, Thailand PDPA, Malaysia PDPA, and other relevant local regulations).
• Support the Legal and Procurement teams with data privacy agreements with global and local vendors, and vendors we use during our client projects, including contract negotiations
• Support the Legal team with data privacy agreements with clients, including contract negotiations
• Work with colleagues in the Information Security and Compliance team on review, writing, and governance of our global policies
• Work on training materials, and conduct global and local training sessions, in a way that both the message and the reasoning are understood
• Perform research and communicate up-and-coming data protection legislation
• Collaborating across teams, you will facilitate and enhance training programs, and you will foster awareness about privacy & security best practices and risks
• Support Data Protection Impact Assessments wherever necessary

Qualification & Experience 

• Legal counsel having worked for a medium-large company in the tech or consultancy sector, with a minimum of 5+ years of experience in data privacy and compliance; experience with a reputable law firm preferred
• Graduate degree (J.D.) in Law from an accredited law school and admitted to practice
• Excellent written and oral communication skills in English
• Able to synthesize complex legal data privacy analysis into clear recommendations
• Curious, talented, and diligent, and used to working closely with both technical and non-technical colleagues in a cross-functional environment
• Have a good understanding of high quality product development, in a fast-paced environment
• Understand the technologies BCG use, to be able to review data protection and retention policies and practices
• Bring extensive knowledge and experience from practice in the field of data protection, with an emphasis on the GDPR and privacy laws across the Asia-Pacific region, such as the Singapore PDPA, Australia Privacy Act, Hong Kong PDPO, Japan APPI, Thailand PDPA, Malaysia PDPA, and other relevant local regulations.
• Be interested in and follow international data protection legislation updates
• Know local juridical decisions, and be pragmatic and risk-oriented about solutions
• Be empathetic and work together with people from all cohorts, offices, and backgrounds
• Able to synthesize complex legal data privacy analysis into clear recommendations