Position:Counsel, Privacy & Legal Information Security

Reports to: Deputy General CounselDPO, Privacy and Legal Information Security
Location: London, UK(Office 3/5 days)

Core Responsibilities

• Handleprivacyand information security-related inquiries from a wide range of groups across the company and provide actionable advice and legal counsel tofacilitateprivacyand information securitycompliancewith the Company’s policies, standards and applicable laws and best practices.

• Evaluate various Comcast programs and initiatives considering applicableprivacyand information securityrequirements.

• Work closely with enterprise and business unit stakeholders to embed privacyandinformationsecurityprinciples into business plans and strategic initiatives during the design and execution process.

• Assistin the creation, maintenance and implementation of policies, processes, data inventories and records of processing, and associated documentation relating to processing of data.

• Review ofcompany practices to ensure consistency withexistingpolicies and other internalprivacy andinformationsecuritygovernance documents.

• Monitor,summarizeand help to implement relevant requirements driven bydevelopments inprivacyandinformationsecurity related laws, regulations, standards, and best practicesin the UK, EU and other international jurisdictionsas needed(such asGDPR,ePrivacyDirective, NIS2, Cyber ResilienceAct, and self-regulatory organizations such as DAA and NAI)

• Providepractical, proactivelegal counsel onprivacy and information security issues, including data governance, data retention,data minimization, andincident response matters

• Advise onpost-acquisitionprivacy andinformationsecurityintegration efforts for newlyacquiredentities.

• Assist with Privacy Impact and Risk Assessments relating to new businesses and initiatives involving processing of personal information.

• Conduct awareness and training efforts as needed and/orrequiredto increase employee understanding of company privacy policies, data handlingand information securitypractices and procedures, and legal obligations.

• Support the work of the Data Protection Officer.

• Know your stuff - beenthusiasticlearners, users and advocates of our game-changing technology,productsand services, especially our digital tools and experiences.

• Drive results and growth.

• Support a culture of inclusion in how you work.

Skills and Experience:

• Aminimum of3-5years combined legal experience at a top law firm and/or in-house legal department, with at least1-3years ofprivacy and information security experience.

• Experience with the details and practical application of current European and UKprivacyand information security legislation, including an in depth understanding of the GDPR, experience with theePrivacyDirective,NIS2, the Cyber Resilience Act, and other related laws Experience withadditionalglobalprivacyand information securitylaws andoperatingwithin a global privacy framework preferred.

• Demonstrated transactional experience, including reviewing,draftingand negotiating privacy and data protection contract terms and agreements, data processing, usage,informationsecurityand/or transfer agreements.

• Experience with conducting privacy impact assessments and advising on applicableprivacy and information securitylegal requirements.

• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance.

• Ability to manage multiple projects and meet deadlines with consistently high-quality results.

• Ability to work independently with moderate supervision.

• Ability to work effectively with colleagues, management, and operations personnel.

• A pragmatic, risk-based approach and collaborative mindset.

• Strong academic credentials.

• Regular,consistent,and punctual attendance.

• Recognised privacy orcyber securityqualification such as CIPP/E or equivalent would be preferable.

• Experience with privacy management platforms and familiarity with productivity tools such as Copilotand Harveywould beadvantageous

• This position is based in London, with some potentialEuropeanand US travelrequired

Disclaimer:

• This information has been designed toindicatethe general nature and level of work performed by employees in this role. It is not designed tocontainor be interpreted as a comprehensive inventory of all duties,responsibilities,and qualifications.

Comcast is an EOE/Veterans/Disabled/LGBT employer