Data, AI and Privacy Legal Counsel – EU Hub Central

Securitas Group Securitas is a world-leading safety and security solutions partner that helps make your world a safer place. By leveraging technology in partnership with our clients, we offer a broad portfolio of value-enhancing services and solutions integrated across the security value chain – from on-site services to advanced monitoring, comprehensive risk prediction and advisory services. With around 322 000 employees in 44 markets, our innovative, holistic approach with local and global expertise makes us a trusted business partner to many of the world’s best-known companies. Benefitting from almost nine decades of deep experience and guided by our values of integrity, vigilance, and helpfulness, we create sustainable value by helping our clients optimize their operations and protect what matters most - their people and assets. ---------------------------------------------------------------------------------------------------------------------------------- About the team The newly established Data, AI and Privacy Legal Team will deliver Data, AI and Privacy support across Securitas Group. The team combines lawyers across Countries, Regions and Group units with non-legal specialists who run the operations, tooling and processes that make the team scalable. ---------------------------------------------------------------------------------------------------------------------------------- About the role We are looking for an operationally minded Data, AI and Privacy Coordinator to join our team in a non-legal support role. You will be the engine room of the team – owning OneTrust day-to-day, improving the workflows and processes that the team relies on, and running the operational privacy and AI tasks. Your role would be to take responsibility for operational tasks, processes and workflows, bringing consistency across countries, and make the team’s way of working measurably more efficient over time. This role offers a rare opportunity to shape how a newly established global function structures its Data, AI and Privacy operations, and to build the tooling and processes that the whole team will use for years to come. ---------------------------------------------------------------------------------------------------------------------------------- Key responsibilities OneTrust ownership * Act as the in-house power user of OneTrust – configure modules, build and maintain workflows, manage users, dashboards, templates and reporting. * Identify gaps and improvements, channel them to the OneTrust stakeholder group, and represent the DAP team’s needs in the tooling roadmap. * Coach business users on how to use OneTrust effectively, and act as the first point of contact for tool-related questions. Workflow and process design * Design, document and continuously improve the operational processes the DAP team relies on – intake, assessments, risk mitigation, ROPAs, privacy notices, monitoring and reporting. * Standardise templates, playbooks and checklists so that quality and turnaround are consistent across hubs. Operational privacy and AI tasks * Maintain and update the Records of Processing Activities (RoPA) and the AI use-case inventory. * Support with incoming Data Subject Rights requests. * Handle the operational steps of incident and breach response – logging, evidence collection, status tracking and coordinating notifications. * Keep transparency notices, privacy statements and AI disclosures up to date across the in-scope entities. * Run the operational side of vendor reviews and DPIA intake – gathering information for a privacy assessment, coordinating with stakeholders and preparing for legal review. * Prepare materials for privacy and AI training and awareness campaigns; track completion and follow-up. Reporting and continuous improvement * Build and run regular reporting so leadership can see bottlenecks and trends. * Contribute to monitoring, audit and reporting processes to support accountable governance. * Drive a continuous improvement loop – collect feedback from the lawyers and from business users, propose changes and implement them. * Partner with stakeholders from IT, Security, Compliance, HR, Marketing and Procurement to embed privacy-by-design and AI governance into operational practice. ---------------------------------------------------------------------------------------------------------------------------------- Who we are looking for You combine practical operational experience with a strong sense of structure and stakeholder engagement. You are comfortable working in a legal and compliance environment without being a lawyer yourself, and you are energized by building something new. Our preferred candidate is: * Operationally-minded – you like building processes, running tooling and making things demonstrably more efficient. * Hands-on with OneTrust – confident building and maintaining workflows, not just using them as an end-user. * A natural process-thinker – you can take a messy reality and turn it into a documented way of working. * Skilled at stakeholder management – you build strong relationships and earn commitment across a complex organisation. * Curious about technology and AI; willing to grow your regulatory understanding as you go. * Tech-savvy and energised by tooling – spreadsheets, dashboards, automation and reporting come naturally. * Continuous-improvement minded – you spot bottlenecks and fix them, rather than work around them. * Comfortable working with different countries, supporting multiple legal counsels and business units in parallel. Required qualifications and experience * 5+ years of experience in a privacy, data protection, compliance operations, GRC tooling or similar operational role. * Bachelor’s degree (privacy, IT, business, compliance or related field); further qualifications welcome. * Hands-on experience administering GRC tooling (OneTrust experience preferred) – including building and maintaining workflows. * Working understanding of the GDPR, the e-Privacy Directive and the EU AI Act – enough to operate within them. * Demonstrated experience designing and documenting operational processes. * Hands-on exposure across the practical privacy workflow – RoPA upkeep, Data Subject Rights requests, breach handling, training preparation. * Excellent project management and communication skills; adept at working with both legal and non-legal colleagues. * Good working understanding of AI and IT applications – able to have informed conversations about AI capabilities without being a deep technologist. * Fluency in English. Nice to have * OneTrust certification (e.g. OneTrust Certified Privacy Professional, Certified Automation Professional). * Relevant privacy certifications, such as IAPP Certified Information Privacy Manager (CIPP/M) or IAPP Certified Information Privacy Technologist (CIPP/T). * Relevant AI governance certifications, such as IAPP Artificial Intelligence Governance Professional (AIGP). * Working knowledge of the wider EU Digital Decade regulatory package (e.g. Data Act, NIS2 Directive, DORA). * Experience with automation or low-code tooling (Power Platform, ServiceNow, or similar). * Proficiency in a second EU language. ---------------------------------------------------------------------------------------------------------------------------------- Working conditions We currently welcome applications from EU Securitas hub locations, with a preference for candidates based in Warsaw, Poland. Hybrid model applies - the specific set up will depend on office regulations in the specific country. The role involves travelling (around 2-4 times per year). ---------------------------------------------------------------------------------------------------------------------------------- What we offer At Securitas we believe in doing the right thing and doing it well. For our customers and our employees. Our employees come from all walks of life and bring with them many talents and perspectives. We aim for diverse representation throughout the company, and we are committed to equal pay, safe working conditions, gender balance and an inclusive work environment with a wide range of skills and development opportunities. If this sounds like the right next step in your professional career, don't hesitate and apply!

About the Company： NetEase, Inc. (Nasdaq: NTES and HKEX: 9999) is a global powerhouse in the Internet and online game industry, with a market capitalization of $80+ billion and more than 25,000 employees worldwide. The NetEase group encompasses a range of innovative businesses centered around content creation, including: NetEase Games, one of the largest and most renowned game developers worldwide by size, revenue and game offerings. Over the years, NetEase Games has focused on developing high quality content and providing the best experience for gamers around the world; * Youdao (NYSE: DAO), a majority-controlled subsidiary of NetEase, Inc. and China’s leading technology-focused intelligent learning company; * Cloud Music (HKEX: 9899), a majority-controlled subsidiary of NetEase, Inc. and China’s leading online music content community; * Yanxuan, NetEase’s private label consumer lifestyle brand; and * Other innovative businesses, including, among others, an online payment platform and to-B AI technology solutions provider. About this Role: We are seeking a mid-level Group Privacy Legal Counsel with 4–8 years of experience to join our legal team. You will manage global privacy compliance, mitigate data risks, and support cross-functional teams on privacy-by-design initiatives, reporting to NetEase’s Head of Privacy & Data Protection. You will also support cybersecurity risk management and compliance with emerging AI regulations and related matters. This position is part of the Group International Legal department which oversees legal matters for the NetEase group (ex-China) and coordinates with the legal teams within each division of the group. Responsibilities Include: * Compliance Management: Maintain and update global privacy policies, notices, and internal frameworks for our global business units, including online games, music streaming, e-commerce, e-sports, intelligent learning, and others. * Product Counseling: Work with product and engineering teams to implement privacy-by-design and privacy-by-default and responsible AI principles into product lifecycles. * Risk Assessments: Provide legal guidance on cross-border data transfers and data localization requirements and conduct, review, and document Data Protection Impact Assessments (DPIAs). * Contract Management: Draft, negotiate, and review Data Processing Agreements (DPAs) as well as the data privacy-related provisions in a wide range of commercial agreements with third parties, including IP licensing and software co-development agreements. * Incident Response: Investigate potential data/cybersecurity incidents and manage regulatory notification obligations. * Employee Training: Design and deliver privacy and AI awareness training across global offices. * Regulatory Monitoring: Track emerging privacy and AI laws (e.g., GDPR, CCPA/CPRA, EU AI Act, EU Digital Services Act, local regulations) and update frameworks. * Outside Counsel: Collaborate and coordinate with outside counsel across various jurisdictions. * Other: Take on other relevant duties as assigned and commensurate with your ability.   Requirements: * Qualification: Qualified lawyer in the U.S., Hong Kong, Singapore, UK and/or Canada. * Experience: 4 to 8 years of legal practice focused on privacy and data protection, cybersecurity and emerging technologies. * Industry Background: Mix of major law firm training and in-house corporate experience preferred. * Tech Literacy: Understanding of data flows and mapping, cloud computing, and modern IT architecture, and familiarity or interest in the interactive entertainment industry in general. * Languages: Fluency in English and Mandarin Chinese. * Location:  Preferably Hong Kong or Singapore. Preferred Skills & Certifications: * Certifications: CIPP/E, CIPP/US, or CIPM designations are highly desirable. * Self-starter: Demonstrates high self-initiative and can work with teams to drive projects to pragmatic solutions. * Communication: Ability to translate complex legal requirements into actionable business advice. * Dynamic Work Environment: Growth mindset that can thrive in a dynamic, cross-border environment, while working effectively across different disciplines, cultures, and time zones. Fair Employment Practices At NetEase, we are committed to fair employment practices. We welcome applications from all individuals, irrespective of age, gender, race, religion, marital status and family responsibilities, or disability.