Cyber Data Protection and Privacy Consultant - Senior - EY GDS Hybrid

Location:

Malaga

Other locations:
Primary Location Only

Date:
Oct 22, 2025

Requisition

As a Cyber Security Data Protection Senior Consultant you would become a part of Data Protection and Privacy team where you will play an active part in helping our clients protect themselves against the evolving Data Protection landscape.

As a Senior Consultant within our Cyber team you will be able to participate in Global projects assigned to Data Protection domain supporting various sectors and regions. We are looking for a DLP specialist with demonstrated experience in developing data protection strategies and implementing solutions to provide data security, privacy and integrity.

EY’s Cybersecurity Practice functions as a center of excellence to assist our consulting practices in planning, pursuing, delivering and managing large, complex full lifecycle initiatives along with providing expertise in leading practices, methods, and resources in the space of Cybersecurity. The Data Protection & Privacy competency within the Cybersecurity practice is a critical competency that supports our clients across all industry sectors.

As a Senior Consultant in the Data Protection & Privacy competency, you will help clients define technical and business requirements for data protection solutions as well as develop business processes and policies related to controlling access to data. This includes helping clients to identify, understand and protect their most critical data throughout the data lifecycle. Engagements range from identifying high value assets to developing data classification schemes, standards and guidelines and implementing processes and technologies to provide leading data protection capabilities.

You and your team will implement and advise clients on multiple data protection products and solutions, including:

• Data classification
• Digital rights management
• Cloud data loss prevention / cloud access security brokers
• File and database encryption

• Consistently deliver quality client services. Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Stay abreast of current business and industry trends relevant to the client's business.
• Establish and maintain relationships with client personnel at appropriate levels.
• Demonstrate in-depth technical capabilities and professional knowledge. Demonstrate ability to assimilate to new knowledge.
• Possess good business acumen.
• Remain current on new developments in consulting services capabilities and industry knowledge.

• Bachelor's degree and approximately 3-5 years of related work experience.
• Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architecture and governance.
• Basic understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell).
• Demonstrated experience in three or more of the following areas:
  • Data leakage/content monitoring and filtering
  • Cloud DLP
  • CASB
  • Secure messaging/email encryption
  • Mobile device security
  • Disk, file, device, and database encryption
  • Key management/Public Key Infrastructure (PKI)
  • Data classification and privacy policies
  • Digital Rights Management (DRM)
  • Secure information storage

The successful candidate must hold or be willing to pursue any of the related professional certifications such as SC-400, DLP Administration, Cloud Security, CASB.

• Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation and administration.
• Working knowledge of operating systems, virtual machine environments, mainframe security packages, and relational database management systems.
• Administration of the DLP tools (such as Broadcom, McAfee, Digital Gaurdian,…