GUCCI Legal Counsel

20 ore fa

pavia, lombardy, Italia Kering Tempo pieno
Overview
In this role you will support Gucci’s data protection and compliance framework, ensuring alignment with regulations and internal policies. You will collaborate with key business functions to embed privacy and compliance into projects, contracts, and processes, including managing Data Subject Requests. You’ll work with cross-functional teams and external advisors to strengthen privacy governance and support audits. This is a hands-on, advisory position within a prestigious luxury house that values legal rigor and cross-functional partnership.
Retribuzione / Benefits Company canteen
Supplementary health insurance
Welfare program
Annual target bonus up to 20% of gross salary
Competitive salary package
National Collective Bargaining Agreement CCNL Industria Pelli e Succedanei
Responsabilità Provide legal guidance on data protection and compliance aligned with regulations and the Compliance program
Assist business units in identifying privacy and compliance implications from new initiatives and projects
Review and negotiate privacy- and compliance-related contract provisions
Conduct DPIAs, LIAs, DTAs, AI-related assessments and maintain ROPA
Perform compliance risk assessments (AML, anti-corruption, Law 231/2001) and analyze processes for risk mitigation
Lead third-party due diligence and screenings and contribute to governance frameworks
Support audits, compliance reviews, and regulatory inquiries as needed
Coordinate and manage Data Subject Requests from employees, clients, and third parties
Collaborate with Retail, Finance, HR, Procurement, Client Data, Client Service, Gucci Tech, and others to ensure privacy across operations
Engage with Kering Privacy and Compliance teams, DPOs, Local Compliance Officers, and external advisors on privacy initiatives
Support awareness and training initiatives to strengthen privacy culture
Requisiti fondamentali Master's Degree in Law (qualification as a Lawyer is a plus)
Interest and motivation to develop expertise in compliance and data protection
Experience in privacy, data protection, compliance, or regulatory matters (in-house or law firm) a plus
Ability to manage high operational workloads and multiple priorities
Knowledge of or willingness to learn corporate systems and databases (e.g., internal tools, CRM platforms)
Strong analytical mindset, attention to detail, and risk assessment capabilities
Stakeholder management
Analytical mindset
Attention to detail
Privacy and data protection law
DPIAs, LIAs, DTAs, AI impact assessments
Data processing governance (ROPA)