Senior Associate - Data Privacy

Role description

Role: Senior Associate

Group: GCO Enablement Team

The opportunity

This is a fantastic opportunity to be part of a leading firm whilst being instrumental in advising on data privacy related matters. We are looking for an experienced legal Professional with expertise in Data Privacy domain to be part of EY’s Global Delivery Services (GDS) team supporting GCO to act as EY’s representative and be responsible for role in Data Privacy processes.

Key Roles and Responsibilities

• Lead and manage comprehensive data privacy assessments, including Privacy Impact Assessment (PIA), vendor due diligence, and records of processing activities, to ensure regulatory compliance and effective risk mitigation.
• Lead and support the Business in completing Privacy Impact Assessments (PIA) on platforms such as TrustArc, including thorough review and validation of PIA questionnaires to ensure accuracy and compliance.
• Develop and manage Action Plans within TrustArc or similar platforms to address identified privacy risks, guiding Business stakeholders on compliance requirements and risk mitigation strategies.
• Draft and review Privacy Notices to ensure alignment with applicable data protection regulations and EY’s compliance standards.
• Engage with Business stakeholders through detailed discussions to gain a comprehensive understanding of EY and third-party tools and applications, focusing on identifying and mitigating risks related to data flows and maintenance of data processing activities in line with regulatory requirements.
• Provide expert advice and support to Business stakeholders in interpreting feedback and recommendations from EY Member Firms, facilitating connections with regional or local Data Protection Officers and legal counsel as needed.
• Participate in and contribute to specialized Data Privacy Compliance projects.
• Maintain a strong understanding of EY’s organizational structure and data privacy frameworks relevant to transactions, including internal and external data transfers, data retention policies, and regulatory obligations.
• Deliver clear, practical business and legal guidance on data privacy matters to internal clients and Business stakeholders across various service lines, enabling informed decision-making and compliance adherence.

Skills and attributes for success

• A subject matter expert in Data Protection laws and having good experience in handling Data Privacy matters.
• Have experience in conducting DPIA/PIA for a Global Company.
• Have extensive experience and knowledge of data privacy matters including GDPR.
• Have a good understanding of emerging technologies such as cloud computing, RPA, AI etc.
• Excellent interpersonal skills with the ability to effectively communicate with Business stakeholders.
• Experiences in client handling and leading a team of legal professionals.
• Ability to team effectively with onshore legal team and colleagues in other functions.
• Highly responsive with ability to manage high workload volumes efficiently and effectively.
• Solution oriented with focus on exceptional client service.
• Keen attention to detail.
• Strong communication and English language (verbal and written) skills.
• Confidence, maturity and high degree of awareness to be able to work effectively with a broad base of senior-level internal stakeholders.
• Strong sense of personal responsibility and ownership for success of a given task.
• Eagerness to contribute in a team-oriented environment and ability to work cooperatively with other teams and country practices, demonstrating cultural sensitivity.
• High levels of personal energy and appetite for work and success.
• Service-oriented personality, proficient at delivering quality work within deadlines.
• Ability to adapt, cross-skill, up-skill and work towards continuous improvements to improve efficiencies and processes within the team.

To qualify for the role, you must have

Qualifications

• Law Degree with consistent strong academic record.
• Mandatory a CIPP (E) certified.

Experience

• 4-6 years of years of relevant post-qualification experience (preferably in a multi-national corporate).

Other Personal Characteristics

• Unquestioned ethics and integrity.
• High level of self-confidence and energy.
• High level of intellectual agility, self-motivation, resourcefulness, and patience.
• Attention to detail.

What working at EY offers

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across ten countries – Argentina, India, China, Philippines, Poland, Mexico, Spain, UK, Hungary, Sri Lanka – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.