Job Description

Position Title: Assistant General Counsel (Dublin / London)
Entity: Kroll Bond Rating Agency Europe Limited or Kroll Bond Rating Agency UK Limited
Employment Type: Full-time
Location: Dublin, Ireland or London, England
Summary/Overview:
Kroll Bond Rating Agency Europe Limited/Kroll Bond Rating Agency UK Limited and its affiliates ("KBRA") are seeking an Assistant General Counsel to join its Legal Department. You will be enthusiastic, highly motivated, have a strong work ethic, and be well-equipped to work closely with other members of the Legal Department on privacy, data protection, and contract-related matters. The position will be based out of our Dublin or London office.
About the Team
The Legal Department handles all of KBRA's legal matters with the exception of ratings. The Legal Department works with analysts, compliance, finance, technology, and senior management across the company.
About the Job:
As Assistant General Counsel, your responsibilities will primarily focus on privacy and data protection issues as well as contract drafting, reviewing, and negotiation. Specific responsibilities may include:

• Advise on international data privacy and cybersecurity laws/regulations (including GDPR, UK GDPR, ePrivacy Directive, CCPA/CPRA, etc.).
• Assist in the enhancement, implementation, and ongoing maintenance of privacy, data protection, and cybersecurity policies and practices across KBRA.
• Conduct and advise on privacy impact assessments, legitimate interest assessments and assist with vendor and third-party due diligence, and issues related to cross-border data transfers.
• Support records of processing activities.
• Assist with incident/ breach response, coordinating with Technology, Information Security, Legal, and Compliance and other internal stakeholders.
• Draft, review, and negotiate contracts and clauses relevant to privacy, including data processing agreements, vendor and service provider contracts, client engagement letters, subscription agreements, and technology/service agreements.
• Provide privacy-related input into contract review workflows and advise internal teams on risk allocation and compliance.
• Monitor and track developments in privacy, data protection and AI, including enforcement, guidance updates, and standards in Ireland, UK, EU, and other relevant jurisdictions.
• Review and update privacy notices and policies.
• Keep up to date with technology trends and technology in use at KBRA and how they interact with privacy laws.
• Liaise with external regulators, legal advisors, and auditors as needed.
• Deliver training and awareness programs on privacy and data protection for internal teams.
• Act as a resource for internal teams with respect to privacy-related questions.
• Contribute to corporate governance on privacy matters, including preparing board or committee materials where required.

Skills & Competencies:

• Strong understanding of ICT risk management frameworks (e.g., NIST, ISO 27001) and operational resilience principles.
• Knowledge of DORA requirements and practical experience in ICT governance, risk, and compliance (GRC).
• Experience with disaster recovery and information security testing.
• Strong incident management and reporting skills.
• Ability to work across first and second line functions with a collaborative mindset.
• Excellent written and verbal communication skills, strong attention to detail, analytical thinking, and problem-solving capabilities.

You will be successful in this role if you have:

• A qualifying law degree (or equivalent) and are admitted to practice as a solicitor in Ireland or England & Wales, or have equivalent qualification eligible for in-house counsel registration.
• 4-8 years post-qualification experience, specifically with hands-on exposure to privacy/data protection law.
• Strong experience with drafting, negotiating, and reviewing contracts, especially with privacy-sensitive clauses (DPAs, vendor agreements, client contracts, etc.).
• Demonstrated knowledge of GDPR (EU & UK), cross-border data transfer mechanisms (e.g. Standard Contractual Clauses, Binding Corporate Rules, etc.), ePrivacy laws, vendor/third party risk, and cybersecurity basics.
• Excellent verbal and written communication skills. Ability to explain legal and technical privacy concepts to non-legal stakeholders.
• Strong research, analytical, organisational, and project management skills, with great attention to detail. Able to manage multiple matters/tracks simultaneously under tight deadlines.
• Experience working in regulated environments is an advantage (financial services, tech, data / analytics, etc.).
• IAPP certification (CIPP/E, CIPP/US, CIPM, or equivalent) is a plus.
• Familiarity with Generative AI tools such as ChatGPT for research, data insights, and general productivity is a plus.

Benefits

• A flexible hybrid work schedule - Tuesdays, Wednesdays, Thursdays in the office
• Competitive benefits and paid time off
• Paid family and disability leave
• Pension plan
• Educational and professional development financial assistance
• Employee referral bonus program

About Us
KBRA (Kroll Bond Rating Agency, LLC) is a full-service credit rating agency registered with the U.S. Securities and Exchange Commission as an NRSRO. Kroll Bond Rating Agency Europe Limited is registered as a CRA with the European Securities and Markets Authority. Kroll Bond Rating Agency UK Limited is registered as a CRA with the UK Financial Conduct Authority pursuant to the Temporary Registration Regime. In addition, KBRA is designated as a designated rating organization by the Ontario Securities Commission for issuers of asset-backed securities to file a short form prospectus or shelf prospectus. KBRA is also recognized by the National Association of Insurance Commissioners as a Credit Rating Provider. Kroll Bond Rating Agency Europe is located at 2nd Floor, One George's Quay Plaza, George's Quay, Dublin 2 D02 E440. Kroll Bond Rating Agency UK is located at Augustine House, Austin Friars, London, EC2N 2HA, United Kingdom.
#LI-KS1
#HYBRID

Skills Required