Overview

Data Protection and Privacy – Assistant Director (Data Risk Manager).

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Role: Data Protection and Privacy – Assistant Director (Data Risk Manager)

The opportunity We are operating in an increasingly connected world that is changing how to manage risk. With fast-paced technology advancements, new innovations within emerging technologies, and an ever-challenging regulatory environment, it is business critical for our organization to not only identify the risks, but also the opportunities these present. As a Data Risk Manager, you will make educated, thoughtful decisions on Risk Management. Our brand depends on it. It’s all part of our long-term commitment to building a better working world and in return, you can expect plenty of opportunities to take on new responsibilities and develop your career.

Responsibilities

• As part of EY Americas Data Protection (Confidentiality, Data Privacy) function, assist in the development, implementation, and monitoring of activities within the Data Protection program.
• Manage the firm’s confidential and personal information inventory and data subject rights (DSR) request process.
• Investigate and address data incidents (loss, theft, and inappropriate disclosure or use of confidential/personal information) per EY policies and procedures.
• Serve as the primary point of contact for EY client serving teams and work across Legal, IT, Investigations, Executive Leadership to coordinate incident response, data inventory management, and DSRs.
• Interpret data protection and privacy laws and policies, determine required actions, and make recommendations based on firm guidance, standards, and experience.
• Coordinate and report Data Protection activities to stakeholders and interact with executive-level personnel.

Skills and Attributes for Success

• Leads Data Risk Management activities within the Data Protection program, including maintaining the EY confidential and personal information inventory and responding to DSRs and internal data access requests.
• Documenting, conducting, and assisting with investigations of data incidents; collaborate with clients and EY functions to understand root cause, impact, and remediation.
• Collaborate with EY Information Security to design and implement controls (e.g., DLP, insider threat) to protect information per regulatory requirements and EY policies.
• Develop, drive, and execute strategy to build out the Data Risk Management function to align with industry best practices and regulatory requirements.
• Assist other Data Protection program functions, including tracking and analyzing data protection laws (e.g., CPRA, VCDPA, HIPAA).

Qualifications

• Strong verbal and written communications, and ability to interface with all levels of EY personnel.
• Solid understanding of data protection issues and EY policies.
• Strong project management and problem-solving skills; investigative mindset; ability to assess situations and determine impact.
• Proven ability to lead under pressure; independence and discretion in decision-making; ability to escalate when needed.
• Ability to right-size risk; high cultural and emotional intelligence; ability to deliver tough messages to executives.
• Strong organizational skills; ability to plan, manage multiple tasks, and meet deadlines in a fast-paced environment.
• Ability to train and supervise teams; foster teamwork and maintain relationships with internal clients/stakeholders.
• Experience with information systems and standard software; knowledge of data protection technologies (e.g., DLP) preferred.
• Bachelor’s degree or equivalent experience; graduate degree preferred; 4–6+ years related experience.

Ideally, you’ll have

• Ability to reference firm data protection policies and propose solutions in complex situations.
• Strong knowledge of global, national, and local data protection laws and standards.
• Understanding of high-level technology trends in data protection; privacy certifications (e.g., ISACA Privacy, CIPP, CIPM, CDPSE) preferred.

What We Look For

We’re interested in people who can right-size risk, propose creative solutions to complex problems, and take responsibility for complex Risk Management projects.

What We Offer You

• Comprehensive compensation and benefits; base salary ranges vary by geography (example ranges provided). Total Rewards includes medical/dental, pension/401(k), and paid time off.
• Hybrid model: most client-facing roles are expected to work in person 40-60% of the time.
• Flexible vacation policy and designated holidays, personal/family care leave, and other well-being supports.

Are you ready to shape your future with confidence? Apply today. EY accepts applications on an ongoing basis. For California residents, click here for additional information. EY is committed to equal employment opportunities and reasonable accommodations in the application process.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Business Development and Sales
• Industries: Professional Services