Description:
A wide-ranging role for a commercially minded lawyer with data privacy expertise and commercial contracts and procurement experience to support the business of Mizuho Bank Ltd., London Branch, Mizuho International plc and Mizuho Bank Europe N.V. and their respective branches and subsidiaries within the EMEA region from London.
Duties And Responsibilities
- To advise on UK GDPR, the Data Protection Act 2018 and other applicable privacy laws across the UK and EMEA, working collaboratively with other data protection specialists / DPOs in the region;
- Provide day to day legal advice on the collection, use, sharing, retention and international transfer of personal data;
- Manage the Mizuho Financial Group’s cross border legal framework for transfers of personal data from the UK/EU, with support from specialist external counsel;
- Manage the Mizuho EMEA Data Protection Policy and related privacy notices and website disclosures, including through an annual review and amendment in response to regulatory changes;
- Draft and negotiate data processing agreements and data sharing agreements;
- Support Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs), including in respect of strategic and technology implementations contemplated by Mizuho EMEA;
- Advise on, and provide support to the Head of Legal EMEA on the management of, personal data breaches, incident response and regulatory notification obligations;
- Monitor legal and regulatory developments in data protection and privacy in the UK, EU, and MENA region where Mizuho has offices and operates;
- Work with and support the team managing DSARs, including triage of incoming DSARs and the instruction and supervision of external counsel or ALSPs for data review and redaction for complex DSARs;
- Provide, supervise and coordinate the provision of legal advisory services for procurement / commercial contracts, and lead a team of two legal professionals to ensure that all legal and documentation aspects of procurement and commercial contracts are handled to a high standard in accordance with Mizuho EMEA policies and procedures and within the firm’s risk appetite, with support from external counsel when necessary to manage the firm’s risks.
- Draft, review and negotiate a broad range of commercial agreements, including:
- Software and SaaS agreements;
- Cloud services agreements;
- Technology licensing agreements;
- Consultancy agreements;
- Professional services agreements;
- Confidentiality agreements;
- Outsourcing agreements;
- Market data and information services agreements; and
- Facilities management and other operational supplier contracts.
- Act as a partner to Procurement and advise on procurement strategy from a legal perspective and support negotiations with strategic and critical partners.
- Support contract standardisation and template development, including through use of LegalTech and promote consistent standards in the drafting and negotiation of commercial contracts;
- Assist with intra-group SLAs including outsourcing arrangements and DORA related matters.
- Support internal audits and governance initiatives where requested.
Plus
- To escalate significant legal issues appropriately and in accordance with internal processes;
- Deliver internal training as appropriate on data privacy and commercial contracting topics;
- Ensure appropriate records are maintained for the Legal Department, including the data bases, directories and documentation management necessary to record transactions / matters worked on; and
- Support their manager to ensure know-how, policies, procedures and playbooks are maintained and reviewed at least annually and in response to any material developments.
Qualifications, Skills, And Experience
- Qualified solicitor of at least 4 years’ PQE, with experience gained through an in-house legal team, an international law firm or a combination of the two;
- Strong technical expertise in UK and EU GDPR and related data privacy law and regulation, including data protection policy, legal frameworks for cross-border data transfers, DPIAs, TIAs and DSARs;
- Significant experience drafting and negotiating commercial contracts, with a sound knowledge of contract law;
- Experience advising on technology, outsourcing or procurement matters;
- Familiarity with UK PRA and FCA outsourcing and operational resilience and cyber security requirements, EBA Guidelines and EU DORA requirements;
- Experience supporting procurement transformation or vendor management programmes an advantage;
- Experience with AI governance in the technology and procurement context an advantage;