You are a Legal expert in GDPR, EU AI ACT and other Data Protection and AI laws to oversee truly global data protection AI governance processes and procedures for the responsible deployment and use of AI in accordance with the rapidly evolving legal and regulatory landscape around Data Protection and AI;
Work as Legal Advisor and AI point of contact for EY´s Global Service Lines (Tax, Assurance, Consulting and SaT) to help understand their development pipeline of new tools and support embedding data protection principles into the foundation of the design, development and use of AI in EY Tools, Systems and Processes in accordance with EY’s responsible AI framework;
Support EY’s Data Protection and Information Security Training Program to empower EY professionals to use AI responsibly and in compliance with evolving laws, regulations and professional standards
Communicate effectively and consistently with key stakeholders (EY Service Line personnel, Global IT, General Counsel’s Office, Risk Management, Talent, and Service Line representatives);
Work with a team of legal resources globally throughout EY such as the Contracts Practice Group in reviewing third-party contracts and advise on data utilization practices in technology and AI projects;
Collaborate closely with the local and regional Data Protection Team to foster the understanding of the Global Data Protection processes and procedures around AI and emerging technologies and support the local implementation of compliant AIData Protection Assessment processes in accordance with EY’s Global Policy Framework;
Raise awareness among EY personnel globally regarding the importance of compliance with data protection & AI regulations and EY’s own AI governance and responsible AI program;
Monitor the evolving global landscape of AI laws and regulations to ensure internal practices and processes are aligned and compliant;
Advise on complex AI projects and identify corresponding risk associated with the use of EY Information, and third-party data use practices including data-scraping and implement solutions to mitigate such risks;
Escalate to the Chief Privacy Officer (CPO) any significant compliance issues and plans for their resolution, as well as implications of local regulations applicable throughout EY globally;
Provide general support to the Global Data Protection Team.
Knowledge, competency and skill requirements:
Must be legally qualified and holding a current practicing certificate;
5+ Years of relevant legal experience either in private legal practice or an in-house role (including proven experience in the field of data protection, IT & IP law or AI in cross border situations);
Solid knowledge in EU data protection legislation (specifically the GDPR) and ideally familiarity with the legislation of one or more other jurisdictions;
Solid knowledge of IT & IP Laws and regulations as well as a strong interest in the evolving landscape of AI laws and regulations including the EU AI ACT; internationally recognized privacy certification, such as CIPP/E, CIPT and CIPM. Preferably an AI certification such as AIGP;
Strong project management skills;
Excellent command of the English language;
Sensitivity to intercultural contacts and communication.