Description
Cisco Legal drives innovation with integrity, partnering across executive leadership, engineering, and sales to shape digital policy, protect customer trust, and champion ethical technology development.
As EMEA Privacy & Data Regulatory Legal Counsel, you will serve as a strategic advisor aligning Cisco's global privacy program with rapidly evolving digital, privacy, and AI governance frameworks across Europe, the Middle East, and Africa.
Responsibilities
- Provide Regulatory Counsel: Deliver actionable legal advice on privacy, data protection, and AI governance across EMEA (including UK and EU GDPR).
- Champion Privacy by Design: Embed privacy and security by design across Cisco's portfolio (including LLMs and AI features) and lead complex DPIAs/TIAs.
- Lead Cross-Border Governance: Ensure compliance for international data transfers (EU SCCs, EU-U.S. Data Privacy Framework, BCRs).
- Shape AI & Digital Policies: Translate the EU AI Act, NIS2, DORA, and the Data Act into practical product requirements and executive guidance.
- Enable Commercial Velocity: Resolve escalated customer data processing agreements (DPAs), data residency requirements, and regulatory inquiries.
- Support Works Councils & HR: Guide employee privacy matters and Works Council engagements across EMEA jurisdictions.
Minimum Qualifications
- Law degree with active Bar admission in good standing in a UK or EMEA jurisdiction.
- 10+ years of relevant experience as a privacy and data regulatory lawyer across EMEA frameworks.
- Proven track record managing international data transfers and global accountability frameworks (EU SCCs, DPF, BCRs).
- Sound business judgment with ability to balance legal risk and commercial velocity in fast-paced environments.
Preferred Qualifications
- Active external privacy or security certifications (e.g., CIPP/E, CIPM, CIPT, CISM, or CISSP).
- Strong experience with AI governance and emerging digital regulations (specifically the EU AI Act).
- Substantive experience at the intersection of privacy, cybersecurity, and operational resilience (e.g., incident reporting frameworks under GDPR, NIS2, and DORA).
- Experience engaging with European Works Councils and navigating local labor-privacy requirements.
- Professional working proficiency in one or more additional European languages (e.g., French, German, or Spanish).