Data Protection Specialist

We're recruiting for a data protection specialist to be a trusted advisor on data protection, working across the firm to solve complex issues, manage risk and support colleagues with practical, business-focused guidance.

This is an exciting opportunity to join the General Counsel function at Mills & Reeve. Reporting to the General Counsel, this role is responsible for developing and taking ownership of key aspects of the firm's operational and commercial data protection programme.

The Data Protection Specialist will be a trusted adviser to partners, lawyers and business services teams, helping the firm navigate complex data protection requirements in a pragmatic and commercially focused way. The role combines technical expertise with practical problem-solving and relationship management, working closely with stakeholders across the business to ensure data protection is effectively embedded into decision-making, procurement, technology, supplier management and client engagements.

You will take ownership of significant areas of the firm's data protection programme, with particular responsibility for supplier management, client and supplier contractual requirements, data protection due diligence, international data transfer governance, auditing and wider regulatory compliance activities. You will help ensure that data protection is effectively embedded into business processes, commercial decision-making and risk management activities. You will take ownership of key work streams, driving activity forward, identifying improvements and implementing practical, risk-based solutions that support the firm's strategic and operational objectives.

This role can be based in any of our regional offices.

The role would suit an experienced data protection professional with a strong background in operational and commercial data protection, ideally gained within a law firm, professional services business or similarly regulated environment.

You will combine strong technical knowledge with sound commercial judgement. You will have the confidence to apply your knowledge in a pragmatic, risk-based way. You will enjoy working independently, taking ownership of significant areas of responsibility and driving matters through to completion.

You will have experience operating within a complex organisation where data moves across multiple systems, teams, processes and third‑party providers. You will be comfortable understanding and analysing complex data flows and advising on the practical implications of business, technology and procurement decisions. You have a focus on non‑contentious data protection (contracts, supplier management, international data transfers), and can assist with responding to, and advising a range of internal stakeholders on, data subject rights, incidents, supplier and client‑side data protection requirements, and broader governance obligations.

Given the responsibilities of this role, it is likely that your background and experience will include:

• strong knowledge of UK GDPR, Data Protection Act 2018 and related regulatory guidance, with the ability to translate legal and regulatory requirements into practical business advice for senior stakeholders.
• significant experience of non‑contentious data protection work, including contracts, supplier management, procurement processes, data protection impact assessments and governance activities.
• strong commercial awareness and the ability to balance regulatory requirements, business objectives and risk considerations.
• confidence operating independently and confident in setting and prioritising multiple competing demands.
• effective self‑management and confidence in setting and prioritising their own work agenda.

The role additionally…