GUCCI Legal Counsel

2 giorni fa

Milan, Lombardy, Italia Kering Tempo pieno

Overview

In this role you will support Gucci's data protection and compliance framework, ensuring alignment with regulations and internal policies. You will collaborate with key business functions to embed privacy and compliance into projects, contracts, and processes, including managing Data Subject Requests. You'll work with cross-functional teams and external advisors to strengthen privacy governance and support audits. This is a hands-on, advisory position within a prestigious luxury house that values legal rigor and cross-functional partnership.

Retribuzione / Benefits

  • Company canteen
  • Supplementary health insurance
  • Welfare program
  • Annual target bonus up to 20% of gross salary
  • Competitive salary package
  • National Collective Bargaining Agreement CCNL Industria Pelli e Succedanei

Responsabilità

  • Provide legal guidance on data protection and compliance aligned with regulations and the Compliance program
  • Assist business units in identifying privacy and compliance implications from new initiatives and projects
  • Review and negotiate privacy- and compliance-related contract provisions
  • Conduct DPIAs, LIAs, DTAs, AI-related assessments and maintain ROPA
  • Perform compliance risk assessments (AML, anti-corruption, Law 231/2001) and analyze processes for risk mitigation
  • Lead third-party due diligence and screenings and contribute to governance frameworks
  • Support audits, compliance reviews, and regulatory inquiries as needed
  • Coordinate and manage Data Subject Requests from employees, clients, and third parties
  • Collaborate with Retail, Finance, HR, Procurement, Client Data, Client Service, Gucci Tech, and others to ensure privacy across operations
  • Engage with Kering Privacy and Compliance teams, DPOs, Local Compliance Officers, and external advisors on privacy initiatives
  • Support awareness and training initiatives to strengthen privacy culture

Requisiti fondamentali

  • Master's Degree in Law (qualification as a Lawyer is a plus)
  • Interest and motivation to develop expertise in compliance and data protection
  • Experience in privacy, data protection, compliance, or regulatory matters (in-house or law firm) a plus
  • Ability to manage high operational workloads and multiple priorities
  • Knowledge of or willingness to learn corporate systems and databases (e.g., internal tools, CRM platforms)
  • Strong analytical mindset, attention to detail, and risk assessment capabilities
  • Stakeholder management
  • Analytical mindset
  • Attention to detail
  • Privacy and data protection law
  • DPIAs, LIAs, DTAs, AI impact assessments
  • Data processing governance (ROPA)