Privacy Associate

Position Title: Privacy Associate (Dublin / London)

Entity: Kroll Bond Rating Agency Europe Limited or Kroll Bond Rating Agency UK Limited

Employment Type: Full-time

Location: Dublin, Ireland or London, England 

Summary/Overview:

Kroll Bond Rating Agency Europe Limited/Kroll Bond Rating Agency UK Limited and its affiliates (“KBRA”) are seeking a Privacy Associate to join its Legal Department. You will be enthusiastic, highly motivated, have a strong work ethic, and be well-equipped to work closely with other members of the Legal Department on privacy, data protection, and contract-related matters. The position will be based out of our Dublin or London office.

About the Team:

The Legal Department handles all of KBRA’s legal matters with the exception of ratings. The Legal Department works with analysts, compliance, finance, technology, and senior management across the company.

About the Job:

As Privacy Associate, your responsibilities will primarily focus on privacy and data protection issues as well as contract drafting, reviewing, and negotiation. Specific responsibilities may include:

• Advising on international data privacy and cybersecurity laws/regulations (including GDPR, UK GDPR, ePrivacy Directive, CCPA/CPRA, etc.).
• Assisting in the enhancement, implementation, and ongoing maintenance of privacy, data protection, and cybersecurity policies and practices across KBRA.
• Conducting and advising on privacy impact assessments, legitimate interest assessments and assisting with vendor and third-party due diligence, and issues related to cross-border data transfers.
• Supporting records of processing activities.
• Assisting with incident/ breach response, coordinating with Technology, Information Security, Legal, and Compliance and other internal stakeholders.
• Drafting, reviewing, and negotiating contracts and clauses relevant to privacy, including data processing agreements.
• Drafting, reviewing, and negotiating vendor and service provider contracts, client engagement letters, subscription agreements, and technology/service agreements.
• Providing privacy‐related input into contract review workflows and advise internal teams on risk allocation and compliance.
• Monitoring and tracking developments in privacy, data protection and AI, including enforcement, guidance updates, and standards in Ireland, UK, EU, and other relevant jurisdictions.
• Reviewing and updating privacy notices and policies.