Kennedys is looking for a Data Risk Officer (Third-Part Risk) to join the Risk & Compliance team, supporting the supports the firm's third-party risk management (TPRM) framework, ensuring that risks arising from suppliers and external partners are identified, assessed, and controlled.

The role focuses on supplier due diligence, risk assessment, and ongoing monitoring to ensure compliance with regulatory, client, and internal obligations.

Team

Kennedys Risk & Compliance team handles a wide range of partnership and risk and compliance issues for the firm and acts as an in-house legal department assisting with regulatory and professional conduct enquiries. Within this the Data Risk Team specialises in risk to data, privacy and information as well as compliance with associated regulations and best practise globally. This includes keeping abreast of new and emerging risks associated with ever developing technology such as AI.

Key responsibilities

• Support end-to-end third-party risk lifecycle including onboarding, assessment, and review
• Maintain third-party records within SureCloud and ensure documentation completeness and regular review
• Conduct supplier due diligence across data protection, security, and compliance
• Support risk tiering based on business impact and data sensitivity
• Assist with GDPR compliance and contract/data processing reviews
• Support DPIAs involving third parties
• Work with Procurement, IT, and Legal to apply governance into onboarding and offboarding of suppliers
• Monitor supplier risk posture and support reporting activities
• Support audits and client assurance processes
• Assist with third-party incident investigations and remediation tracking

Required experience

• Understanding of GDPR and data protection principles
• Understanding of supply chain risk in technology
• Exposure to third-party risk or supplier due diligence and awareness of EU DORA
• Strong stakeholder management and organisational skills
• Ability to analyse and communicate risk clearly

Please let us know if you require any additional support or adjustments to be made in order to submit your application to Kennedys.

*where a level of experience is indicated, this is a guideline only and represents the amount of time we would usually expect a candidate to accumulate the requisite level of experience. This does not preclude applications from candidates with more or less experience.

About Kennedys

Kennedys is a global law firm with expertise in dispute resolution and advisory services. With over 3,000 people in 45 offices across 18 countries around the world we have some of the most respected legal minds in their field.

Our lawyers handle both contentious and non-contentious matters, and provide a range of specialist legal services, for many industry sectors but we have particular expertise in litigation and dispute resolution, especially in defending insurance and liability claims.

We're a fresh-thinking firm, and we're not afraid to bring challenging new perspectives to the table way beyond the traditional realm of legal services. We empower our clients with a diverse range of ideas, tools and technology to make their lives easier, as well as delivering exceptional results, every time.

What do we have to offer?

We welcome high-performing lawyers, business services professionals, secretaries, graduates and apprentices to join our rapidly expanding global firm. Whatever your role at Kennedys, you'll be involved in exciting and stimulating work, where your input will make a difference.

Our culture and values form a big part of who we are and we take them seriously. We make a difference by being approachable, straightforward, supportive, distinctive and ambitious. Our values are at the core of who we are and what make us a great firm to work with and for.

The Firm recognises the value of investing in our people's development and believes our culture and values contribute to the quality of our work and of our client relationships. With a culture of on-the-job and experiential learning, peer to peer learning, mentoring, resources and tools that enable you to drive your career, we can support your development in your current and future roles. A variety of other opportunities are available including secondments to clients and our global offices.

We strive to celebrate diversity, empower our people and ensure everyone can bring their authentic selves to work. We've created a culture based on client service, professional excellence, hard work and trust, where diversity, equity and inclusion (DE&I) is a key priority. We recognise that many of our people want to work for an employer that is aligned to their values, which is why we are building an inclusive culture, decarbonising our operations and supporting our people to thrive at work. Our people are the key to driving this change and helping us to make a difference to our clients, our people and the communities in which we live and work.

Kennedys is an equal opportunities employer and is committed to ensuring our recruitment processes are as inclusive as possible. We expect all employees to be aware of and comply with all relevant policies and procedures within their jurisdiction, including those relating to Information Security, Data Protection and Quality Management, refer any breach promptly to Risk & Compliance and to complete all mandatory training when requested.

Documents

• MASTER - Data Risk Officer (Third-Party Risk) June 2026.pdf (76.50 KB)