Join EY's Global Delivery Services (GDS) team as an Assistant Director-Manager specializing in Data Privacy and Incident Response. This is a unique opportunity to provide expert legal counsel on data privacy matters and play a critical role in managing global data incidents. You will collaborate closely with senior leadership and various global teams to ensure robust data protection and incident response frameworks are maintained and continuously improved.

As part of a leading global firm, you'll contribute to building a better working world by helping clients grow, transform, and operate securely. EY offers a dynamic and global environment where you can develop an exceptional career through diverse opportunities, continuous learning, and a supportive inclusive culture.

Provide legal oversight for global data protection and privacy incidents, ensuring adherence to EY policies and regulatory requirements.

Support the management of complex and significant data incidents alongside senior legal counsel and the Chief Privacy Officer.

Coordinate with Information Security, Risk Management, and General Counsel teams to ensure consistent incident management across jurisdictions.

Develop and maintain tracking, reporting, and metrics for data incidents to support risk management and executive reporting.

Contribute to the ongoing enhancement of EY's global data incident response framework, policies, and procedures.

Communicate program requirements and provide guidance on managing cross-border data incidents.

Identify, assess, and escalate significant legal and regulatory issues arising from incidents.

Collaborate globally to ensure a coordinated incident response.

Support training and awareness initiatives to bolster understanding of data protection obligations.

Oversee team onboarding, capability building, and career development, including allocating work and managing performance.

A qualified lawyer with a strong academic background is essential.

Mandatory CIPP(E) certification; other privacy certifications like CIPM or CIPT are advantageous.

Minimum of 8 years of relevant post-qualification experience, preferably within a multinational corporation.

Demonstrated expertise in managing complex, cross-border data incidents and advising senior stakeholders on legal, regulatory, and risk factors.

In-depth knowledge of EU and international data protection laws, including GDPR, with familiarity in other key jurisdictions being a plus.

Experience interpreting legal requirements related to data breaches, regulatory investigations, and crisis management.

Excellent legal judgment, analytical skills, and the ability to offer practical, risk-based advice under pressure.

Strong stakeholder management and communication abilities, with experience in complex global organizations.

Proficiency in written and verbal English communication is required.

A good understanding of emerging technologies such as cloud computing, RPA, and AI is beneficial.

Experience in client handling and leading legal teams is valued.

Ability to collaborate effectively with onshore legal teams and other functions.

Possesses high responsiveness, confidence, maturity, and strong personal responsibility.