Privacy Counsel

Introduction

Welcome to Gallagher - a global community of people who bring bold ideas, deep expertise, and a shared commitment to doing what’s right. We help clients navigate complexity with confidence by empowering businesses, communities, and individuals to thrive. At Gallagher, you’ll find more than a job; you’ll find a culture built on trust, driven by collaboration, and sustained by the belief that we’re better together.

Whether you join us in a client-facing role or as part of our brokerage division, our benefits and HR consulting division, or our corporate team, you’ll have the opportunity to grow your career, make an impact, and be part of something bigger. Experience a workplace where you’re encouraged to be yourself, supported to succeed, and inspired to keep learning. That’s what it means to live The Gallagher Way.

As Privacy Counsel, you will play a crucial role in ensuring the protection and privacy of data within Gallagher Global Brokerage ("GGB"), focusing primarily on the US business segment, including privacy support for recently acquired companies. You will be responsible for developing and implementing data protection strategies, policies, standards, procedures, and training materials to both gain efficiencies in our privacy practices and to ensure compliance with relevant privacy laws and regulations across GGB, with a particular focus on the US.

As the need arises, the Privacy Counsel will also occasionally support other business units under the GGB umbrella to include non-US operations (Caribbean, Canada, etc.).

You will collaborate the Global Privacy Office ("GPO"), local privacy, security, IT, AI, Legal and compliance teams, senior business stakeholders and third parties to ensure the delivery of Gallagher's data privacy strategy within the established risk appetite. This involves adhering to company and regulatory requirements while meeting the needs of customers, regulators, colleagues and stakeholders.

You will provide advice and support to the business to identify, articulate and guide them in the implementation and management of their privacy risks in support of their business strategies.

You will monitor compliance with data privacy, AI and cybersecurity laws, as well as internal policies and procedures.

• Data Protection Strategy
  :
  Collaborate with the GPO, GGB Division Privacy and IT Leads, the GGB-US General Counsel and local GGB business leaders to develop and execute a comprehensive data protection strategy for GGB that aligns with business objectives and regulatory requirements. Assist the Global Chief Privacy Officer to implement the Global Data Privacy Framework (Tier
  1) within GGB and develop and implement any required GGB local Data Privacy Frameworks (Tier
  2) to minimize privacy risks and drive risk reduction initiatives.
• Policy Development
  :
  Create and maintain data protection policies, standards, guidelines and playbooks that reflect best practices and ensure compliance with applicable laws and regulations.
• Risk Management
  :
  Identify and assess privacy risks (including conducting privacy risk assessments and data transfer impact assessments) across jurisdictions and provide guidance to business units on risk mitigation strategies. Complete and maintain GGB Privacy Risk Registers, with specific focus on inherent and residual risk.
• Privacy Advice and Support
  :
  Provide expert advice and guidance to GGB, the GPO and other stakeholders on privacy-related matters, including data sharing, international transfers of personal data, consent management, data subject rights, data incidents, vendor risk management, due diligence and integration relating to merger and acquisition activities, responses to client privacy queries, data minimization, privacy complaints, determinations of requirements to have a Data Protection Officer (or equivalent) in an entity, data analytics and artificial intelligence.
  
  Handle internal and third‑party requests for access to GGB data.
• Training and Awareness
  :
  Develop and deliver privacy training programs to raise awareness and ensure understanding of data protection obligations among employees, including high…