Kennedys is looking for a Senior Data Risk Manager to join us on a 12 month fixed term contract. This role provides strategic oversight and operational leadership across data privacy, regulatory compliance, and information risk. The role ensures personal data is managed lawfully, securely, and in line with global regulatory requirements, acting as a subject matter expert in data protection and privacy risk.

Team

Kennedys Risk & Compliance team handles a wide range of partnership and risk and compliance issues for the firm and acts as an in-house legal department assisting with regulatory and professional conduct enquiries. Within this the Data Risk Team specialises in risk to data, privacy and information as well as compliance with associated regulations and best practise globally. This includes keeping abreast of new and emerging risks associated with ever developing technology such as AI.

Key responsibilities

• Act as SME on data protection (GDPR, UK DPA)
• Lead DPIAs and privacy risk assessments
• Oversee the maintenance of risk registers and mitigation plans
• Develop privacy policies and frameworks
• Support ISMS and ISO 27001 alignment
• Lead incident and breach management
• Engage stakeholders and deliver training
• Support AI and emerging risk governance
• Product owner for Surecloud (or equiv) Platform
• Lead and develop team members and deputise for Head of Data Risk as required.

Required experience

• Strong knowledge of GDPR and global privacy laws inc HIPAA, PIPA and Aus Privacy
• Experience in data risk management and governance
• DPIA and incident management experience
• Understanding of ISO 27001 / ISMS
• Demonstratable experience of assessing AI and Privacy risks
  - Stakeholder engagement skills

Please let us know if you require any additional support or adjustments to be made in order to submit your application to Kennedys.

*where a level of experience is indicated, this is a guideline only and represents the amount of time we would usually expect a candidate to accumulate the requisite level of experience. This does not preclude applications from candidates with more or less experience.

About Kennedys

Kennedys is a global law firm with expertise in dispute resolution and advisory services. With over 3,000 people in 45 offices across 18 countries around the world we have some of the most respected legal minds in their field.

Our lawyers handle both contentious and non-contentious matters, and provide a range of specialist legal services, for many industry sectors but we have particular expertise in litigation and dispute resolution, especially in defending insurance and liability claims.

We're a fresh-thinking firm, and we're not afraid to bring challenging new perspectives to the table way beyond the traditional realm of legal services. We empower our clients with a diverse range of ideas, tools and technology to make their lives easier, as well as delivering exceptional results, every time.

What do we have to offer?

We welcome high-performing lawyers, business services professionals, secretaries, graduates and apprentices to join our rapidly expanding global firm. Whatever your role at Kennedys, you'll be involved in exciting and stimulating work, where your input will make a difference.

Our culture and values form a big part of who we are and we take them seriously. We make a difference by being approachable, straightforward, supportive, distinctive and ambitious. Our values are at the core of who we are and what make us a great firm to work with and for.

The Firm recognises the value of investing in our people's development and believes our culture and values contribute to the quality of our work and of our client relationships. With a culture of on-the-job and experiential learning, peer to peer learning, mentoring, resources and tools that enable you to drive your career, we can support your development in your current and future roles. A variety of other opportunities are available including secondments to clients and our global offices.

We strive to celebrate diversity, empower our people and ensure everyone can bring their authentic selves to work. We've created a culture based on client service, professional excellence, hard work and trust, where diversity, equity and inclusion (DE&I) is a key priority. We recognise that many of our people want to work for an employer that is aligned to their values, which is why we are building an inclusive culture, decarbonising our operations and supporting our people to thrive at work. Our people are the key to driving this change and helping us to make a difference to our clients, our people and the communities in which we live and work.

Kennedys is an equal opportunities employer and is committed to ensuring our recruitment processes are as inclusive as possible. We expect all employees to be aware of and comply with all relevant policies and procedures within their jurisdiction, including those relating to Information Security, Data Protection and Quality Management, refer any breach promptly to Risk & Compliance and to complete all mandatory training when requested.

Documents

• MASTER - Senior Data Risk Officer June 2026.pdf (76.13 KB)