Legal Counsel, Data & Privacy

This is a pivotal role in Airwallex's recently established global Data & Privacy department, reporting to the Director of Data & Privacy.

You will act as a critical legal partner to Airwallex's China business and operations, helping the company navigate China's privacy and data security framework.

Responsibilities:

• Advise Product, Engineering, Commercial, Marketing, Information Security and Business leadership teams on China's privacy and data security requirements, including the Personal Information Protection Law, Data Security Law and Cybersecurity Law.
• Develop and execute a comprehensive compliance program for China data rules.
• Provide privacy counselling to Product teams and support privacy by design, privacy impact assessments and contractual work with the Product and Legal Regulatory teams.
• Lead or support privacy counselling and contractual assistance for other APAC regions.
• Support the Director of Data & Privacy in shaping Airwallex's data strategy for its China business and operations.
• Coordinate international data flows for the broader Airwallex business and contribute to strategic data initiatives across the EU, US and other regions.

Requirements:

• 6–10 years of post-qualification legal experience, preferably gained in a dynamic, fast-growing digital, fintech or technology company.
• Qualification through bar admission or in a common law jurisdiction.
• At least three years of general privacy experience, with a solid understanding of Chinese data laws, including the Personal Information Protection Law, Data Security Law and Cybersecurity Law.
• Professional proficiency in both English and Mandarin.
• Experience providing product and privacy counsel in an agile environment.
• A highly commercial and practical mindset, with the initiative to identify and prioritise opportunities effectively.
• A global outlook combined with deep local knowledge.
• Strong written and verbal communication and presentation skills.
• A track record of working effectively across multiple functions and influencing a broad stakeholder group.

Preferred qualifications:

• Familiarity with other major privacy regimes, including GDPR, CCPA, PDPA and PIPEDA.
• Experience in technology, financial services and/or a high-growth environment.