Legal Associate

ServQual provides cybersecurity, data privacy and compliance services to clients across India, the UK and the USA. We are looking for a Legal Associate to support commercial contracts, privacy engagements and legal requirements across our business and our SUSAN security and privacy compliance platform.This role suits someone who enjoys drafting, researching and translating legal requirements into clear, practical actions for business and technical teams.Key responsibilitiesDraft, review and support negotiations on NDAs, service agreements, statements of work, SLAs, data processing agreements, vendor contracts and employment agreements.Identify contractual risks relating to liability, indemnities, confidentiality, intellectual property, payment, termination and data protection.Support client privacy engagements involving India’s Digital Personal Data Protection Act (DPDPA), GDPR and UK GDPR.Prepare and review privacy notices, consent wording, retention policies, data-sharing agreements and other privacy documentation.Assist with Records of Processing Activities (RoPA), Data Protection Impact Assessments (DPIAs), data principal and data subject requests, and privacy grievances.Work with consultants and developers to translate privacy requirements into workflows and documentation for SUSAN.Research regulatory developments and explain their implications for the business and clients.Maintain contract templates, legal records, renewal schedules and action trackers.Coordinate with external legal counsel where specialist advice is required.Required qualifications and skillsLL.B. or an equivalent recognised law degree.Experience in commercial contracts, corporate legal work or data privacy.Strong legal drafting, research and written communication skills.Working knowledge of Indian contract law and data protection principles.Ability to explain legal risks clearly and propose practical amendments.Strong attention to detail, confidentiality and ownership of deadlines.Ability to work independently in a remote environment and collaborate with clients and colleagues.Preferred experienceExposure to technology, SaaS, cybersecurity or consulting businesses.Familiarity with DPDPA, GDPR or UK GDPR implementation.Experience reviewing international customer and supplier agreements.Privacy certifications such as CIPP/E, CIPM or equivalent would be an advantage.What you’ll work onYou will gain exposure to international contracts, client privacy programmes and the development of a security and privacy compliance platform, working directly with leadership, consultants and engineering teams.