Privacy Associate

Role Overview

Kroll Bond Rating Agency (KBRA) is seeking a dedicated Privacy Associate to join the Legal Department, based in their Dublin or London office. The successful candidate will work closely with the team to address privacy, data protection, and contractual matters with enthusiasm and a strong work ethic.

Team Environment

The Legal Department manages all legal affairs at KBRA except ratings-related issues, collaborating with departments such as analysts, compliance, finance, technology, and senior management.

Key Responsibilities

• Advise on international data privacy and cybersecurity regulations, including GDPR, UK GDPR, ePrivacy Directive, and CCPA/CPRA.
• Support enhancement, implementation, and maintenance of privacy, data protection, and cybersecurity policies throughout KBRA.
• Conduct privacy impact and legitimate interest assessments; assist with vendor/third-party due diligence and cross-border data transfer issues.
• Maintain records of processing activities and assist with data incident or breach response by coordinating with internal teams.
• Draft, review, and negotiate contracts related to privacy such as data processing agreements and other vendor, service provider, client, and technology agreements.
• Provide guidance on contract risk allocation and compliance concerning privacy.
• Monitor updates in privacy, data protection, AI laws, enforcement actions, and standards across Ireland, UK, EU, and other jurisdictions.
• Update privacy notices and policies; stay informed on technology trends impacting privacy including AI.
• Interact with external regulators, legal advisors, and auditors when necessary.
• Deliver privacy and data protection training to internal teams; act as a privacy resource within the organization.
• Contribute to corporate governance activities involving privacy, including preparation of materials for boards or committees.
• Collaborate with cross-functional teams including Compliance, Technology, Marketing, Business Development, as well as external counsel and regulators.

Candidate Profile

• Bachelor’s degree in a related discipline is mandatory.
• Between 4 and 8 years of post-qualification experience, particularly with practical experience in privacy/data protection law.
• Proficient in drafting, negotiating, and reviewing agreements, especially those involving privacy clauses such as DPAs and vendor/client contracts.
• Comprehensive understanding of GDPR (EU & UK), cross-border data transfer mechanisms like Standard Contractual Clauses and Binding Corporate Rules, ePrivacy laws, vendor risk, and basic cybersecurity principles.
• Exceptional communication skills, both verbal and written, with the ability to simplify complex legal and technical privacy topics for non-legal personnel.
• Strong research, analysis, organizational, and project management skills, with keen attention to detail and ability to handle multiple priorities under strict deadlines.
• Experience in regulated sectors such as financial services, technology, or data analytics is advantageous.
• Professional privacy certifications from IAPP (e.g., CIPP/E, CIPP/US, CIPM) or equivalent are a plus.

Employee Benefits

• Flexible hybrid work schedule with in-office attendance on Tuesdays through Thursdays.
• Competitive benefits package along with paid leave.
• Company pension plan.
• Financial support for educational and professional development.
• Employee referral bonus incentives.

About Kroll Bond Rating Agency

KBRA is a comprehensive credit rating agency registered as an NRSRO with the U.S. SEC. Its European and UK entities are registered with ESMA and the UK FCA respectively. The agency is recognized by various regulatory bodies and is located at Marble Arch House in London for the UK office. The role supports a hybrid working model.