Data Protection Officer - WPS

Overview of role

WPS is seeking a highly skilled mid-level attorney who can also act as Data Protection Officer (DPO) to lead compliance efforts with global data protection laws.

The role will serve as an integral part of WPS' in-house legal team and become the primary point of contact for data protection matters, ensuring robust governance and safeguarding personal data across all jurisdictions where WPS operates.

The role will monitor compliance and data practices internally to ensure WPS and its global service lines and business support functions comply with all applicable requirements, and will be responsible for staff training, data protection impact assessments, and internal audits. The role will also serve as the primary contact for supervisory authorities and individuals whose data is processed by the organisation.

The role will report to the Director of Legal but will also be working very closely with other senior leads within WPS.

Duties, Responsibilities & Person Specification

• Define and own the global data protection framework for WPS.
• Monitor adherence to all applicable data protection laws.
• Design, maintain and ensure compliance with WPS' data protection and information security policies, procedures and privacy statements.
• Advise on Data Protection Impact Assessments (DPIAs), mitigation strategies and remediation measures.
• Collaborate with the IT department on access controls and security measures.
• Deliver training sessions and promote a culture of privacy and security across the organisation.
• Manage Data Subject Access Requests (DSARs) and ensure timely responses.
• Uphold rights of access, rectification, and erasure in line with privacy obligations.
• Act as the primary contact for supervisory authorities and internal stakeholders.
• Provide guidance to clients on WPS’ role as data controller or processor.
• Assist with reviewing, drafting, updating and maintaining all client engagement and corporate governance related documentation, including charters, terms of reference, manuals, policies, procedures and templates, as well as bulletins and other internal communications.
• Assist with the management and preparation of all legal proceedings, regulatory inspections and interactions with authorities.
• Other legal, risk management and data protection related tasks from time to time.

Education, Skills & Experience

• Qualification as an attorney with specialist experience in data protection and privacy compliance.
• Professional certifications such as CIPP/E, CIPM, or equivalent are highly desirable.
• Proven track record in implementing data protection frameworks, preferably with a global reach and within financial services.
• Strong understanding of GDPR, and other global data protection regulations.
• Familiarity with information security principles, risk management, and data governance tools.
• Excellent communication and stakeholder management skills.
• Ability to influence senior leadership and drive compliance initiatives.
• Strong analytical and problem-solving skills with attention to detail.
• Commercial mindset with proven experience working alongside senior management to influence strategic decision-making.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

#LI-LQ1

#LI-Hybrid