Senior Counsel – Data Protection

About the role

Worley is seeking a Senior Counsel to lead its global data‑protection programme. The role provides pragmatic legal advice on GDPR and other privacy regimes, supports compliance across the group, and works closely with internal teams to embed privacy by design.

Key responsibilities

• Advise the business and employees on obligations under GDPR, UK, Australian, US and other data‑protection laws.
• Monitor and report on group‑wide compliance with privacy legislation and internal policies.
• Design and deliver privacy awareness and training programmes.
• Ensure appropriate consent mechanisms are in place for all data‑capture touchpoints.
• Review Privacy Impact Assessments and vendor privacy risk assessments using the TrustArc platform.
• Maintain Records of Processing Activities, vendor onboarding documentation, and legal bases for processing personal data.
• Manage data‑subject request workflows, ensuring verification, timely handling and proper documentation.
• Support personal‑data breach response, including triage, risk assessment, stakeholder coordination and regulatory notifications.
• Collaborate with the Legal team on contracts, data‑sharing arrangements and data‑processing agreements.
• Stay current on global privacy law changes and assist with local compliance initiatives.

Required profile

• Professional law degree (LL.B or equivalent) and admission as a lawyer.
• Minimum of 3 years of experience in data‑protection or privacy law.
• Demonstrated ability to interpret and apply GDPR and other international privacy regulations.
• Experience conducting privacy audits, impact assessments and breach response.
• Strong communication skills to convey complex privacy implications clearly.

Required skills

• TrustArc privacy management platform