Technology Contracts and Data Protection Specialist

About the Role
Vitol has significantly expanded its technology platform in recent years including significant growth in data science and AI. As a consequence, we are seeking an experienced technology contracts and data protection specialist to support the growing demand for technology related legal support. The workload will include advising on and negotiating licences, technology related procurement, IP and privacy law.

The successful candidate will have a minimum of 3 years PQE with a track record of providing pragmatic and solution focused technology and privacy law related legal support.

Key Responsibilities
IT Contract Reviews and Management:
Review, draft, and negotiate technology contracts, including software, SaaS, cloud, and technology service agreements.
Ensure technology contracts meet legal, regulatory, and internal policy requirements, with a focus on data protection and information security clauses.
Act as the primary point of contact for technology related stakeholders on contractual matters, building strong working relationships to bridge capability and capacity gaps.
Support technology and other procurement teams in vendor due diligence and contract lifecycle management.
Maintain a register of technology contracts and their key terms.
Advise technology and business teams on contract interpretation and issue resolution.
Escalate complex or high-risk contract issues to senior legal counsel as needed.

Data protection:
Develop, update, implement and coordinate privacy policies and procedures across multiple jurisdictions.
Support the implementation and management of data protection compliance programmes (GDPR, UK DPA, FADP, etc.).
Conduct and document data protection impact assessments for new projects and systems.
Provide practical privacy advice to internal stakeholders, supporting day-to-day operations.
Support and deliver privacy training to staff.
Collaborate with Information Security and HR on data protection and breach response.
Maintain records of processing activities and support data subject rights requests.

Qualifications
Essential Requirements:
A licence to practise law ideally in the UK, EU, or Switzerland.
Minimum 3 years’ experience in technology law and data protection.
Strong knowledge of GDPR, UK DPA, FADP and international privacy frameworks.
Proven track record in reviewing and managing technology contracts in an operational environment.
Excellent stakeholder management and communication skills, especially with technology teams.
Experience working in fast-paced international corporate environments.

Preferred Qualifications:
Qualified lawyer (UK qualified solicitor or equivalent).
Experience in of working in a law firm or in-house legal team providing advice to the technology teams.
Fluency in English and French.