Global Data Risk - Controls Program Leader

Overview

Location:

London

Other locations:
Primary Location Only

Date: 13 Jan 2026

Requisition

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

The Global Data Risk Controls Program Leader is the principle point of leadership and direction for a unifying Global Risk and Control Framework for data risk across EY. This lies at the heart of our governance model for data risk, connecting cross-functional initiatives across our global teams to build a culture of effective data risk management for all EY.

The landscape of data risks to consider is vast – from spanning the lifecycle of data from collection & creation, through to retention & disposition;
Covering regulatory, contractual and ethical requirements;
Considering how data is used and re-used, with effective governance and world class protection and security;
Ultimately our data is powering our journey to become the world’s most trusted AI-powered professional services organization. Managing risk across this dynamic environment is central to maintaining trust and confidence – from our Clients, our Member Firms & Service Lines, our regulators and our people.

The Global Data Risk Controls Program Leader is an experienced Risk Management or Data Protection professional at EY with knowledge and curiosity for the canvas of data, technology, security and innovation risk, and excellent connections to cross-functional leaders within global functions. Confident to operate on a dynamic risk landscape to create and manage a consistent and globally applicable framework for data risks and controls within global functions, Member Firms and across Service Lines.

Empowering and enabling the First LoD, the Data Risk Program Leader is a strong communicator, natural collaborator and is adept at managing a portfolio of multi-stakeholder activity.

Your key responsibilities

• Maintain and transform a dynamic Global Risk and Control framework for data risks –the foundation for all data governance activities within EY.
• Link to and mature the use of this framework for control monitoring and testing across a variety of contexts.
• Leverage advanced control mapping techniques to identify, assess, and mitigate risks proactively, ensuring that controls are optimally aligned with evolving regulatory and business requirements.
• Establish and mature the use of this matrix for control testing for all client engagements via Global Compliance Engagement Testing (GCET).
• Establish and mature the use of this matrix for control testing for Data Risks in AI development and deployment in conjunction with Global Innovation Risk Management.
• Drive the automation of control testing processes to increase efficiency, accuracy, and scalability in monitoring data risk controls across the organization.
• Define baseline and elevated levels of controls for handling client information to support the Data Protection and Confidentiality Global Policy objectives.
• Utilize technology solutions to streamline the identification of control gaps and enable reporting and remediation tracking.
• Update and maintain control descriptors in line with the Data Protection and Confidentiality Global Policy and supplementary guidance.
• Create and deploy global training for all required Data Risk controls.
• Create and deploy global awareness for all required Data Risk controls.
• Development of this framework requires active engagement and influence of global leaders within Service Lines, Risk, GCO and Compliance functions, in addition to effective communication and deployment to Regional Leadership teams.
• Articulate future strategies to identify and evaluate data risks at a Regional and local level and develop business cases accordingly.
• Articulate future strategies to evaluate and monitor the presence and effectiveness of controls and data risk mitigation activities. Maintain a control content repository, a test script library, and dashboards for KRIs/trends; progressively automate evidence collection and control checks.
• Coordinate…