EY Data Protection Specialist - CESA GCO/RM Team 

Bulgaria, Sofia 

428015080

Key Requirements:

- Law degree and 3-5 years of experience working in multinational organization.

- Background in data protection or data risk management.

- Experience in supporting cross-functional and cross-border projects.

Key Responsibilities:

As a Data Protection Specialist, you will:

- Support the implementation of data risk program initiatives of EY within the CESA Region (29 countries in the Central, Eastern and South-Eastern Europe and Central Asia), including:

• Assisting with Data Protection processes and guidance;
• Contributing to Data Incident Response efforts;
• Participating in Security and Information Security projects to embed privacy by default and privacy by design;
• Helping maintain the data landscape, ROPA, PIA, and classification;
• Assisting with data risk compliance and monitoring;
• Supporting the definition and implementation of data usage guardrails.

- Support Global Data Risk initiatives by helping EY professionals across Service Lines and within Core Business Services understand their data protection responsibilities.

- Assist with the implementation of best practices for data retention and disposition in CESA as guided by Global Records & Information Management.

- Knowledge of data protection, information security, and data governance practices.

- A proactive approach to learning and exploring a complex risk landscape.

- Organizational skills with the ability to prioritize tasks and adapt to changing demands.