Privacy Counsel

We are supporting a high-growth, technology-led marketplace business operating at the intersection of digital platforms, media, and data. With a significant European footprint and a rapidly expanding user base, the business has scaled quickly through both organic growth and strategic acquisitions, building one of the largest audiences in its sector.

This is a pivotal role within a fast-evolving organisation that sits at the centre of a complex ecosystem connecting consumers, commercial partners, and advertisers. The business holds a significant volume of data and is focused on responsibly unlocking its commercial value.

The Role

This is a newly created position and the first dedicated privacy hire within the organisation, offering the opportunity to shape and scale the privacy function from a strong existing foundation. Reporting into the General Counsel, you will act as a strategic adviser to the business, helping to evolve and operationalise a robust privacy governance framework while enabling continued commercial growth. The role requires a technically fluent, commercially minded privacy professional who can work closely with Product, Engineering, Data, and Marketing teams to embed practical, scalable compliance solutions.

Key Responsibilities

• Develop and maintain a comprehensive privacy governance framework, including policies, ROPAs, privacy notices, retention schedules, and risk registers, ensuring alignment with actual data flows and systems.
• Build a strong internal culture around privacy as a driver of trust, designing and delivering engaging, commercially relevant training across the business.
• Act as a key business partner to Marketing, Media, Product, and other teams, providing clear and pragmatic privacy advice and supporting senior leadership on key issues.
• Lead and support investigations into data breaches, including engagement with regulators where required.
• Support the legal team with drafting and negotiating DPAs and DSAs in the context of commercial agreements.

About You

• 3+ PQE in data protection and privacy
• Ideally, with secondment or in-house experience within a technology, platform, or marketplace environment.
• Strong understanding of privacy regulation, with the ability to quickly interpret and apply new legal and regulatory developments.
• Proven ability to build relationships across all levels of an organisation, including senior leadership.
• Experience working with AI and emerging technologies, particularly in the context of privacy and governance.

What’s on Offer

• £80,000 - £90,000
• Equity participation
• Hybrid working model with flexibility
• 28 days' holiday plus bank holidays, increasing to 35 days.
• Work from abroad for a month's annual scheme
• Private healthcare and enhanced benefits package
• Strong focus on learning, development, and progression

Ben@heriotbrown.com | 07511 518 834