Cybersecurity - Data Protection & Privacy - Manager; Data Protection Specialist

Cybersecurity - Data Protection & Privacy - Manager (Data Protection Specialist)

Location:

Toronto

Other locations:
Primary Location Only

Date:
Jan 6, 2026

Requisition

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

EY Canada’s Cybersecurity practice is seeking an experienced and technically proficient Manager for our Data Protection & Privacy (DPP) team. The ideal candidate will have extensive experience in developing and implementing data protection strategies, conducting assessments, and a strong technical understanding of the Data Loss Prevention (DLP) vendor market. This role requires a strategic thinker with a strong technical background and the ability to lead projects and teams effectively.

Data Protection Strategy Development: Design and implement comprehensive data protection strategies that align with organizational goals and regulatory requirements.

Risk Assessments: Conduct thorough data protection assessments to identify vulnerabilities and recommend mitigation strategies to enhance data security.

DLP Implementation: Lead the implementation of DLP solutions, ensuring they are tailored to meet the specific needs of clients while adhering to industry best practices.

Vendor Management: Maintain a deep understanding of the DLP vendor market, evaluating and recommending solutions that best fit client requirements.

Stakeholder Engagement: Collaborate with cross-functional teams, including IT, legal, and compliance, to provide a cohesive approach to data protection.

Training and Awareness: Develop and deliver training programs to enhance awareness of data protection policies and procedures among employees.

Regulatory Compliance: Stay abreast of data protection regulations and how they relate to data protection.

Team Leadership: Mentor and guide junior team members, fostering a culture of continuous learning and professional development.

• Extensive Cybersecurity
  
  Experience:
  
  A minimum of 5 years of hands‑on experience in cybersecurity, with at least 4 years focused on data protection and privacy with a focus on strategy development and assessments.
• Bachelor’s degree in Information Technology, Cybersecurity, Data Privacy, or a related field;
• In‑depth knowledge of the DLP vendor landscape and experience in implementing DLP solutions.
• Strong understanding of data protection regulations (e.g., GDPR, CCPA) and leading practices.
• Proven project management skills, with the ability to manage multiple projects simultaneously. Including design, implementation, and optimization of data governance, data security, and risk and compliance solutions. Along with a proven track record of successfully scoping, resourcing, and delivering complex cybersecurity projects.
• Leadership
  
  Skills:
  
  Proven ability to lead project teams, manage resources effectively, and mentor consultants to ensure collaborative and successful delivery. Client
• Relationship Management:
  Experience supporting client engagements, understanding needs, and providing technical guidance to align solutions with objectives in the Industrials and Energy sector.
• Strategic Thinker:
  Solid strategic thinking to analyze data protection landscapes, identify risks, and recommend proactive, technically sound solutions.
• Innovative Problem Solver:
  Strong ability to apply creative technical solutions to complex challenges, leveraging best practices in data governance, security controls, and compliance automation.
• Excellent Communication
  
  Skills:
  
  Effective verbal and written communication to explain technical Data Protection concepts with the ability to communicate complex technical concepts to non‑technical stakeholders, including contributing to technical documentation and client presentations.
• Certifications:
  
  Relevant certifications such as CISSP (Certified Information Systems Security Professional), CIPP/C (Certified Information Privacy Professional/Canada), CDPSE (Certified Data Privacy Solutions Engineer), or other…