GDS RMS – Global Data Protection – ADR-ICM - Assistant Manager
The Data Risk Mitigation Program has been established in line with the needs of the business to control and govern lifecycle of personal and confidential data at the global level, supporting immediate and future regulatory, legal, risk and operational requirements. We are operating in an increasingly connected world that is changing how to manage risk. With fast-paced technology advancements, new innovations within emerging technologies, and an ever-challenging regulatory environment, it is business critical for our organization to identify not only the risks but the opportunities these present to us.
Your key responsibilities
- Serve as part of the GDS Account Data Risk – Independent Control Monitoring team in executing independent testing of controls related to protecting data at the client account level
- Contribute to the development of testing principles to mitigate data risks
- Work closely within the Account Data Risk team to ensure the delivery of the testing is in line with EY’s global data protection framework and is supported by clear processes for evaluation, communication and reporting of test results
- Consult and collaborate effectively across key data protection stakeholders on testing activities, as needed
- Ability to evaluate and summarize test results and propose remediation activities
- Document findings and observations to contribute to continuous learning/improvement and inform potential enhancements to procedures, processes and controls
- Participate in activities that support a cohesive and balanced approach across Global Data Protection and the client account
- Develop and maintain reporting (e.g., Regional/Area risk leaders, Service Line leaders, Account leaders), as appropriate
- Provide input into development of first line risks and controls capabilities related to data risk, including collaboration with the Data Stewardship Office and supporting initiatives such as Services Data Risk
Skills and attributes for success
- Technical attributes:
- Experience with risk and compliance (e.g., risk assessment, control frameworks, audits, and/or testing)
- Awareness of data protection principles and application of controls
- Knowledge of engagement lifecycle
- Experience in Technology Risk, a plus
- Experience with metrics and reporting
- Management attributes:
- Curious mindset, asks questions and takes initiative
- Strong communication skills
- Risk oriented
- Ability to identify potential issues or challenges and know when to escalate
- Strong team player
- Project Management
To qualify for the role, you must have
- Bachelor's degree and approximately 5+ years of related work experience
- Experience in privacy and security risk assessment
- Experience or background in either quality, risk management, cybersecurity
- Familiarity and experience with the application of data protection law
- Nice to have
- IAPP certifications (either CIPP/E, CIPP/US and/or CIPM)
- CISA, CISM, CISSP, or equivalent
What we offer
EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations – Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.
- Continuous learning : You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.