Data Privacy Lawyer

Uludağ Enerji’s Compliance team is expanding and seeking a Data Privacy Lawyer to support data protection and privacy compliance efforts across the organisation. In this role, you will bring in-depth legal expertise and strategic insight to ensure that Uludağ Enerji adheres to national and international data protection and privacy regulations, including KVKK.

You will play a key role in developing, implementing, and maintaining privacy frameworks, while acting as a trusted advisor to business units on data privacy risks and best practises.

Reporting to the Data Protection and Compliance Manager, your responsibilities will include:

• Advising on and ensuring compliance with data protection laws, including KVKK, GDPR, Cybersecurity Law, ISO 27701, and other applicable privacy regulations
• Drafting, reviewing, and negotiating data processing agreements, privacy notices, consent forms, and contractual clauses,
• Supporting the implementation of company-wide privacy frameworks, policies, and procedures,
• Reviewing company contracts to ensure compliance with data protection and privacy requirements,
• Managing and conducting privacy impact assessments (PIAs) and data protection impact assessments (DPIAs),
• Providing legal guidance on data subject rights, data retention, cross-border data transfers, and lawful data processing bases,
• Monitoring regulatory developments and assessing their impact on business operations,
• Acting as a subject matter expert to cross-functional teams, particularly Legal, HR, and IT, ensuring alignment on privacy matters,
• Leading investigations and responding to data breaches, including notification requirements and root cause analysis,
• Supporting employee training and awareness activities on data privacy and data protection,
• Leading internal audits related to data protection to assess compliance and identify improvement areas,
• Contributing to internal reporting on data privacy KPIs and risk metrics

Requirements:

• Law degree from a recognized university,
• 1 to 5 years of experience in data protection and privacy law,
• Deep knowledge of KVKK and GDPR, familiarity with other international privacy laws is a plus
• Demonstrated experience in drafting and negotiating privacy-related contracts and documentation
• Ability to translate complex legal concepts into practical and actionable business guidance
• Excellent research, analytical, and written/verbal communication skills
• Fluent in English
• Ability to work independently and handle multiple projects in a fast-paced environment
• Advanced proficiency in MS Office, experience with privacy management tools is a plus