TC - CS - Data Protection And Privacy - Senior

TC - CS - Data Protection And Privacy - Senior

Other locations:
Anywhere in Country

Date:
Jan 8, 2026

Requisition

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

EY
- Cyber Security (DPP) – Technology Consulting –
Senior

As part of our EY Cyber security, Technology Consulting team, your role will be to actively establish, maintain and strengthen internal and external relationships. You will be responsible for delivery and maintaining quality of services and deliverables on your engagements. You’ll also identify potential business opportunities for EY and GDS within existing engagements and elevate these as appropriate. Similarly, you’ll anticipate and identify risks within engagements and share any issues with senior members of the team.

We’re looking for Senior Consultant who help our clients improve their security and data protection posture to respond to the dynamic data and security threats. You will provide data privacy and protection domain expertise and utilise your business insight to work closely with our clients to advise, design, build, deploy and test pragmatic security solutions that will give real and tangible benefits and security enhancement.

In line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture and help fellow team members to develop and grow together.

• Lead the execution of comprehensive Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for clients, identifying potential data privacy risks and providing their remediation plans.
• Develop and implement robust consent management frameworks to ensure clients' adherence to data subject consent requirements as per applicable regulations.
• Conduct in-depth data privacy gap assessments and maturity assessments to identify areas for improvement and guide clients in developing a strategic roadmap for program enhancement.
• Provide strategic guidance on data subject rights, including access requests, rectification requests, and erasure requests.
• Craft and implement effective incident response plans to manage data breaches and privacy incidents, minimizing risk and upholding regulatory compliance.
• Develop and maintain Records of Processing Activities (RoPAs) for clients, ensuring transparency and accountability.
• Partner with clients to develop and maintain comprehensive privacy policies and procedures that align with industry best practices and applicable data privacy regulations.
• Cultivate a deep understanding of the latest data privacy regulations (e.g., GDPR, CCPA, DPDPA, China PIPL, etc) and advise clients on their potential business implications.
• Facilitate training sessions for both internal and client teams to raise awareness of data privacy best practices.
• Effectively manage stakeholder relationships, ensuring clear communication and project alignment.
• Foster strong collaboration with colleagues across diverse disciplines (e.g., legal, technology) to deliver holistic privacy solutions to clients.

• Relevant work
  
  Experience:
  
  4 to 6 years.
• Proven track record of successfully conducting PIAs, DPIAs, privacy gap assessments, and privacy maturity assessments for diverse clients.
• In-depth knowledge of data subject rights and experience in supporting clients with their fulfilment.
• A proven ability to develop and implement data breach response plans and manage privacy incidents effectively.
• Experience in developing privacy strategies and roadmaps.
• Experience in planning and implementation of privacy controls.
• Strong understanding on RoPA documentation.
• Demonstrated ability to craft and maintain comprehensive privacy policies and procedures.
• Proficiency in a variety of data privacy regulations, including GDPR, CCPA, PIPEDA, DPDPA etc.
• Excellent communication, presentation, and interpersonal…