GDS Data Protection Counsel

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Assistant Director – Global Delivery Services (GDS) Legal Counsel – Data Protection Incident Response    Function          : GDS Legal team Sub Function   :  Data Protection Scope              : Global   The opportunity This is an exciting time to join the GDS Data Protection team as we scale our program to support the continued expansion of the business. You will build your professional knowledge and credentials, gain insight into how EY operates globally and work within a cross-functional team of professionals to embed and continuously improve the GDS data protection program. The role will focus primarily on managing Data Protection Incident Response across GDS operating locations, including Argentina, Hungary, India, Mexico, the Philippines, Poland, Spain, Sri Lanka, the UK and other locations as GDS continues to expand. The role will form part of the Data Protection portfolio of the GDS General Counsel’s Office (GDS GCO).   Your key responsibilities The Assistant Director supporting the GDS Data Protection portfolio, you will provide strategic legal advice relating to data incidents and will instruct, oversee and guide members of the Data Incident Delivery team. You will be responsible for management reporting, keeping Data Incident Response documentation up to date, including policies, protocols, RACIs and escalation matrices, in line with local laws and EY Global guidance. You will also ensure that legal professional privilege is established and maintained, prepare assessments and provide legal advice on whether matters are reportable to regulators and data subjects under local law requirements, and oversee any such reporting. In addition, you will provide legal approval and oversight for certain investigative steps and act as a subject matter expert and escalation point for complex or sensitive incidents. You will consult and collaborate effectively with key internal stakeholders, including, but not limited to, the Global Deputy Lead Counsel – Data Protection Incident Response and the GDS Chief Privacy Officer.   Skills and attributes for success

Approximately 10 years’ post-qualification experience, including at least five years’ professional experience in Data Protection Incident Response in a legal counsel capacity Strong understanding of data protection principles and the application of controls to protect confidential and personal data Strong knowledge of the GDPR and related data protection requirements Experience conducting internal investigations, particularly data breach response investigations, is preferred but not required Comfortable working in an unstructured and complex environment that requires creative thinking and sound logical reasoning Ability to continuously add value to assigned processes and develop practical, effective solutions Ability to learn and understand EY’s global policies, with familiarity with related Legal, Risk Management and Data Governance initiatives beyond the immediate area of expertise Ability to manage tasks and activities in a timely manner and take responsibility for specific outcomes Basic knowledge of project management tools and methodologies Ability to handle confidential and sensitive information appropriately Strong research and communication skills Ability to manage multiple tasks successfully and provide effective team leadership Interest in working with a culturally diverse global team to design, develop and deploy programmes and share knowledge Excellent relationship-building and interpersonal skills, with an inclusive