Cybersecurity - Data Protection - Manager (Data Protection Specialist)

At EY, we’re all in to shape your future with confidence.    We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.    Join EY and help to build a better working world.

The opportunity   EY Canada’s Cybersecurity practice is seeking an experienced and technically proficient Manager for our Data Protection (DP) team. The ideal candidate will have extensive experience in developing and implementing data protection strategies, conducting assessments, and a strong technical understanding of the Data Loss Prevention (DLP) vendor market. This role requires a strategic thinker with a strong technical background and the ability to lead projects and teams effectively.   Your key responsibilities:   Data Protection Strategy Development: Design and implement comprehensive data protection strategies that align with organizational goals and regulatory requirements. Risk Assessments: Conduct thorough data protection assessments to identify vulnerabilities and recommend mitigation strategies to enhance data security. DLP Implementation: Lead the implementation of DLP solutions, ensuring they are tailored to meet the specific needs of clients while adhering to industry best practices. Vendor Management: Maintain a deep understanding of the DLP vendor market, evaluating and recommending solutions that best fit client requirements. Stakeholder Engagement: Collaborate with cross-functional teams, including IT, legal, and compliance, to provide a cohesive approach to data protection. Training and Awareness: Develop and deliver training programs to enhance awareness of data protection policies and procedures among employees. Regulatory Compliance: Stay abreast of data protection regulations and how they relate to data protection. Team Leadership:  Mentor and guide junior team members, fostering a culture of continuous learning and professional development.   To qualify for the role you must have:

Extensive Cybersecurity Experience: A minimum of 5 years of hands-on experience in cybersecurity, with at least 4 years focused on data protection with a focus on strategy development and assessments. Bachelor’s degree in Information Technology, Cybersecurity, or a related field;  In-depth knowledge of the DLP vendor landscape and experience in implementing DLP solutions. Strong understanding of data protection regulations (e.g., GDPR, CCPA) and leading practices. Proven project management skills, with the ability to manage multiple projects simultaneously. Including design, implementation, and optimization of data governance, data security, and risk and compliance solutions. Along with a proven track record of successfully scoping, resourcing, and delivering complex cybersecurity projects. Leadership Skills: Proven ability to lead project teams, manage resources effectively, and mentor consultants to ensure collaborative and successful delivery. Client Relationship Management: Experience supporting client engagements, understanding needs, and providing technical guidance to align solutions with objectives. Strategic Thinker: Solid strategic thinking to analyze data protection landscapes, identify risks, and recommend proactive, technically sound solutions. Innovative Problem Solver: Strong ability to apply creative technical solutions to complex challenges, leveraging best practices in data governance, security controls, and compliance automation. Excellent Communication Skills: Effective verbal and written communication to explain technical Data Protection concepts with the ability to communicate complex technical concepts to non-technical stakeholders, including contributing to technical documentation and client presentations. Certifications: Relevant certifications such as CISSP (Certified Information Systems Security Professional), CIPP/C (Certified Information Privacy Professional/Canada), CDPSE