Our Purpose
At Xero, weʼre here to make running a business beautiful. By making small business more efficient every day, connecting them with big business technology and empowering a community behind them, their potential is limitless. When that happens, weʼre not only helping small business, weʼll be building a stronger economy that can change the world.
How youʼll make an impact
You will be responsible for supporting Xeroʼs privacy and AI strategies. Youʼll be responsible for partnering with the business and providing legal advice and support in relation to a range of complex privacy, AI, cyber and spam related legal, regulatory, and compliance matters across all regions in which Xero operates.
You will report to the GM, Privacy & AI Governance and work closely with the wider global Legal team, external advisors and strategic partners to support Xeroʼs legal and compliance function.
You will have a primary focus in the Privacy team, but will regularly work across the other teams within the Legal team on projects and initiatives.
What youʼll do
● Support legal and business teams in identifying and resolving privacy, AI, cyber and spam marketing related legal matters, including both business-led and privacy team-led initiatives, and including both global and region-specific matters.
● Work closely with varied stakeholders from product, technology and data services teams -including security, data governance and data science - on existing and new data use cases and product features to ensure compliance with Xeroʼs approach to responsible data use, including working through data protection impact assessments (DPIAs) where appropriate.
● Working with the GM - Privacy & AI Governance), drive and support the further development and maturation of internal privacy, data, and AI governance programmes.
● Support data incident management, including taking “on-call” shifts to respond to urgent incidents.
● With the GM - Privacy & AI Governance, support Xeroʼs response to enquiries from privacy, cyber, and AI regulators.
● Work closely with CX to ensure compliance with data subjectsʼ rights obligations.
● Help evaluate the impact of evolving legislative and regulatory environments for privacy, AI, and cyber on Xeroʼs various business units, ensuring the business is informed.
● Collaborate and build relationships with key internal stakeholders to champion privacy, AI, and cyber across the business while continuing to enable commercial opportunities in a fast-paced environment.
● Support and facilitate key governance forums (including DUGG, SGG, and the Data Privacy Group), and advise as required on privacy, AI, cyber and spam marketing topics.
● Review and advise on data processing addenda and data protection/privacy related clauses.
● Ensure the business is informed and compliant with any relevant existing or proposed legislation that may impact the operations of the business
● Contribute to internal policy and process development
● Liaise and collaborate with legal team peers to deliver holistic legal function outcomes
● Assist with investigating and responding to enquiries from law enforcement agencies and regulators
● Liaise with and manage Xeroʼs external legal advisors, as required
● Responding to ad hoc queries in the Xero teamʼs legal inbox.
Success looks like
Success in this role looks like building strong, collaborative relationships across all levels of the legal team, including your direct line manager, internal strategic stakeholders, and external advisors. You will effectively support Xero's legal function, ensuring seamless communication, alignment on goals, and the delivery of high-quality outcomes to the business.
What youʼll bring with you
Critical capabilities
● Solves problems - Generates new and innovative solutions for Xero to be successful by exploring diverse approaches to overcome challenges. Able to support and encourage creativity in a collaborative environment.
● Collaborates - Maintains clear communication with stakeholders, sharing essential facts, and actively involves others to achieve both individual and team goals while fostering a collaborative team environment.
● Makes processes better - Takes action to address process breakdowns to ensure work methods are productive and efficient. Is able to effectively strike a balance between process and results.
● Courage - Shows conviction and progress in the face of challenges and uncertainty. Is able to openly address difficult topics and ideas, even when facing potential criticism.
● Is comfortable stepping up to address difficult issues. Is energised by new challenges, and openly addresses difficult or controversial topics, embracing open debate and constructive criticism.
● Instils Trust - Builds trust by being honest, straightforward, and consistent in actions and words. Follows through on commitments and upholds professional integrity while balancing competing priorities.
● Communicates effectively - Communicates information clearly and concisely while keeping others well-informed. Actively listens and shows genuine interest in others' perspectives.
● Identifies legal issues & opportunities - Collaborates with key stakeholders to assess legal risks and identify business opportunities, providing practical guidance on complex legal issues to support strategic decision-making across Xero.
● Balances stakeholders - Engages with stakeholders to address conflicts, ensuring efforts align with their needs and finding balanced solutions through open communication. Strives to balance the needs of multiple stakeholders through understanding needs and issues.
● Action oriented - Takes timely action on important issues, proactively addressing challenges and problems as they arise. Identifies and pursues new opportunities that understanding how they benefit Xeroʼs strategic priorities
● Understands Xeroʼs business - Keeps informed about marketplace changes and business news that impact Xero. Understands how own work connects into key business priorities and drivers.
Experience
● 4-7 years PQE (in-house legal experience desirable)
● Law degree
● Current practising certificate
● Experience negotiating & drafting agreements in a commercial context
● Demonstrated ability to be a commercially minded business partner in a fast paced environment
● Experience providing legal advice to companies in the technology sector (desirable)
● Experience with data protection regulation (desirable)
● Experience liaising with regulators and statutory/law enforcement bodies (desirable)
● Experience with financial services regulation (desirable)
EA licence 15C7529
EA Personnel R1985185