Assistant General Counsel (Dublin / London)

Role overview

KBRA is looking for an Assistant General Counsel to join its Legal Department, with the role based in either Dublin or London. This is a hands-on legal position for someone who is highly motivated, detail-oriented, and comfortable working across privacy, data protection, cybersecurity, and commercial contracting matters.

Team environment

The Legal Department manages all legal work for KBRA except ratings-related matters. It partners regularly with teams across the business, including analysts, compliance, finance, technology, and senior leadership.

What you will do

• Advise on privacy, data protection, and cybersecurity requirements across multiple jurisdictions, including GDPR, UK GDPR, ePrivacy rules, and U.S. privacy laws such as CCPA/CPRA.
• Help develop, roll out, and maintain privacy, data protection, and cybersecurity policies and procedures across the organisation.
• Carry out and support privacy impact assessments and legitimate interest assessments, along with vendor and third-party due diligence and assessment of cross-border data transfers.
• Maintain and support records of processing activities.
• Assist with incident and breach response efforts, working with Technology, Information Security, Legal, Compliance, and other internal stakeholders.
• Draft, review, and negotiate privacy-related agreements and clauses, including data processing agreements.
• Draft, review, and negotiate vendor and service provider contracts, client engagement letters, subscription agreements, and technology/service agreements.
• Provide privacy guidance during contract review processes and advise teams on compliance and risk allocation.
• Track regulatory, enforcement, guidance, and standards developments in privacy, data protection, and AI across Ireland, the UK, the EU, and other relevant regions.
• Review and refresh privacy notices and policy documents.
• Stay current on technology and AI trends and their interaction with privacy requirements at KBRA.
• Work with external regulators, counsel, and auditors when needed.
• Deliver privacy and data protection training and awareness sessions for internal teams.
• Serve as a go-to legal contact for privacy-related and other legal queries from the business.
• Support corporate governance activities relating to privacy, including board or committee materials where necessary.
• Collaborate closely with cross-functional groups such as Compliance, Technology, Marketing, and Business Development, as well as external counsel and regulators.

Candidate profile

The role suits a lawyer with practical experience in privacy and data protection who can also handle commercial contracts and communicate clearly with non-legal stakeholders.

About the employer

KBRA is a full-service credit rating agency with registrations and recognitions in the U.S., EU, UK, and Canada. The Dublin office is at 2nd Floor, One George's Quay Plaza, George's Quay, Dublin 2 D02 E440, and the London office is at 1st Floor, Marble Arch House, 66 Seymour Street, London W1H 5BT, England.

Additional information

This position is full-time and based in-office in Dublin or London, with a hybrid schedule that requires office attendance on Tuesdays, Wednesdays, and Thursdays. The role is tagged as hybrid in the source material.