Job Description
Purpose of the role
To help ensure that the Cyber, Data, IP & Emerging Tech Legal activities
are conducted in compliance with applicable laws and regulations, and to help
the bank manage legal and reputational risks associated with these
activities.
Accountabilities
-
Development and implementation of best practice legal strategies for risk
management and compliance.
-
Legal advice and support to the business on cybersecurity, data privacy,
intellectual property (IP) and emerging tech matters, including
cybersecurity and data privacy incidents, IP protection and technology
deployment.
-
Representation of the bank in legal proceedings related to cybersecurity,
data privacy, IP protection and emerging tech, such as litigation,
arbitration, and regulatory investigations.
-
Creation and review of legal documents such as data protection policies,
cybersecurity protocols, IP licenses and emerging tech policies to ensure
compliance with applicable laws and regulations.
-
Legal research and analysis to stay up to date on changes in laws and
regulations that may impact the bank's cybersecurity, data privacy, IP
protection and emerging tech practices.
-
Developing and delivering training programmes to educate employees on legal
and regulatory requirements related to cybersecurity, data privacy, IP
protection and emerging tech.
-
Pro-active identification, communication, and provision of legal advice on
applicable laws, rules and regulations (LRRs). Keeping up to date with
regards to changes to LRRs in the relevant coverage area. Ensuring that LRRs
are effectively allocated to, and adequately reflected within, the relevant
policies, standards and controls.
Assistant Vice President Expectations
-
To advise and influence decision making, contribute to policy development
and take responsibility for operational effectiveness. Collaborate closely
with other functions/ business divisions.
-
Lead a team performing complex tasks, using well developed professional
knowledge and skills to deliver on work that impacts the whole business
function. Set objectives and coach employees in pursuit of those objectives,
appraisal of performance relative to objectives and determination of reward
outcomes
-
If the position has leadership responsibilities, People Leaders are expected
to demonstrate a clear set of leadership behaviours to create an environment
for colleagues to thrive and deliver to a consistently excellent standard.
The four LEAD behaviours are: L – Listen and be authentic, E – Energise and
inspire, A – Align across the enterprise, D – Develop others.
-
OR for an individual contributor, they will lead collaborative assignments
and guide team members through structured assignments, identify the need for
the inclusion of other areas of specialisation to complete assignments. They
will identify new directions for assignments and/ or projects, identifying a
combination of cross functional methodologies or practices to meet required
outcomes.
-
Consult on complex issues; providing advice to People Leaders to support the
resolution of escalated issues.
-
Identify ways to mitigate risk and developing new policies/procedures in
support of the control and governance agenda.
-
Take ownership for managing risk and strengthening controls in relation to
the work done.
-
Perform work that is closely related to that of other areas, which requires
understanding of how areas coordinate and contribute to the achievement of
the objectives of the organisation sub-function.
-
Collaborate with other areas of work, for business aligned support areas to
keep up to speed with business activity and the business strategy.
-
Engage in complex analysis of data from multiple sources of information,
internal and external sources such as procedures and practises (in other
areas, teams, companies, etc).to solve problems creatively and effectively.
-
Communicate complex information. 'Complex' information could include
sensitive information or information that is difficult to communicate
because of its content or its audience.
-
Influence or convince stakeholders to achieve outcomes.
All colleagues will be expected to demonstrate the Barclays Values of Respect,
Integrity, Service, Excellence and Stewardship – our moral compass, helping us
do what we believe is right. They will also be expected to demonstrate the
Barclays Mindset – to Empower, Challenge and Drive – the operating manual for
how we behave.
Join us as a core member of the "Data Legal Counsel" at Barclays, where
you'll will be supporting stakeholders on a wide variety of data privacy and
data governance (more broadly than personal data and privacy) initiatives with
a primary focus on India, and supporting members of the team in APAC, the UK,
EME and the US. This includes collaboration with Product Legal, Country Legal,
Compliance and other stakeholders as appropriate to deliver holistic and
commercially viable advice with consideration to local nuances and operational
needs. spearhead the evolution of our digital landscape, driving
innovation and excellence. You'll harness cutting-edge technology to
revolutionise our digital offerings, ensuring unapparelled customer
experiences.
You may be assessed on the key critical skills relevant for success in role,
such as experience with lawful basis identification, consent management, cross
border data transfers, regulatory requests and disclosure analyses as well as
retention Data legal, as well as job-specific skillsets.
To be successful as a core "Data Legal Counsel", you should have experience
with:
Basic/ Essential Qualifications:
-
Provide day-to-day advisory on data privacy and management in India and
escalate to APAC Data Legal on complex issues to align best practices with
the global agenda.
-
Act as Subject Matter Expert (SME) for data privacy and governance, support
stakeholders on the ground including EIP Legal, CIT Legal, Country Legal,
Country Compliance and DP Compliance, and assist with global contracts and
projects impacting India and its entities.
-
Negotiate and/or address ad hoc queries on new privacy policy and consent
wording for employees as well as clients of IB, CB and PB in India and Gift
City.
-
Negotiate and/or address ad hoc queries from Procurement and/or Sourcing on
the use of new template contracts with suppliers (e.g., General Terms, PO,
Short Form Agreements outsourcing agreements, data processor supplemental
agreement).
-
Assist with external consultant to maintain a comprehensive and up-to-date
data inventory in India. Provide support to the Global team on completing
Data Transfer Impact Assessment (DTIA) and/or reviewing output to be
provided to data subjects in response to Data Subject Access Requests
(DSAR).
Essential Skills / Basic Qualifications:
-
Bachelors or Masters degree in Law and a qualified lawyer in India with a
tenured experience, preferably in an established global financial
institution or law firm.
-
Demonstrate legal risk management and communication skills including
experience with managing multiple stakeholders and be a pro-active team
player.
-
Highly motivated and ability to deliver quality work independently and
consistently.
Desirable skillsets/ good to have:
-
Strong ability to grasp new areas of law, and laws of
non-India jurisdictions (or jurisdictions other than the “base”
jurisdiction(s) of qualification) quickly.
-
Adaptable and able to tackle a wide variety of issues – proactively seek
solutions and offer solutions/recommendations.
-
Genuine interest in this area of the law and has exposure to topical
developments in regulatory changes and development in Asia.
-
Some experience with US, EU and/or Asia data-related regulation.
-
Demonstrates a solid understanding of GDPR and India Digital Personal Data
Protection Act and Rules.
-
The following qualifications / certifications are preferred: CIPP (IAPP) -
CIPP/A and/or CIPP/E; CIPM or CIPT; and ISO 27001 or equivalent
privacy/security certifications.
This role will be based out of Pune.