Join EY and contribute to building a better working world. This role is with the Global Delivery Services (GDS) Data Protection team, a rapidly expanding function. You will enhance your professional knowledge, understand EY's global operations, and collaborate within a cross-functional team to strengthen the data protection program across various international locations. This position is part of the GDS General Counsel's Office (GCO) and works in partnership with GDS Risk Management to execute the data protection program.

This is a significant opportunity to grow your career within a global organization. You'll gain exposure to diverse legal and business environments while contributing to critical data protection initiatives. EY fosters an inclusive culture, empowering you to leverage your unique perspective and skills to make a substantial impact.

As a Supervising Associate in the GDS Data Protection team, you will support key aspects of the GDS Data Protection program. This includes providing expert advice on data protection legislation and EY's global privacy framework. You'll also assist with privacy impact assessments, third-party due diligence, and data protection clauses in contracts. Responsibilities extend to managing training initiatives, handling individual rights requests, and maintaining records of processing activities (RoPA).

Further duties involve compiling management information, preparing reports, and updating policies and procedures. You will liaise with external counsel when necessary and provide day-to-day data protection advice, including support for setting up new GDS locations. The role requires active participation in global projects and networks, collaborating with internal stakeholders like GDS Lead Counsel and the GDS Chief Privacy Officer, as well as external groups such as Service Lines, Functions, Risk Management, and EY Technology.

We are seeking candidates with approximately 7 years of Post-Qualified Experience (PQE), including a minimum of 5 years of dedicated data protection legal counsel experience. A strong understanding of data protection principles and the practical application of controls for safeguarding confidential and personal data is essential.

Proven experience in operational data protection processes, such as Privacy Impact Assessments (PIAs), handling individual rights requests, RoPA, and third-party due diligence is required. Familiarity with advising on data protection-related contract provisions and international data transfers is also necessary. The ideal candidate thrives in complex, unstructured environments, demonstrating out-of-the-box thinking and logical reasoning abilities. Continuous value addition to processes and solution development are key attributes.

Candidates should possess the ability to learn and apply EY's global policies and be comfortable with initiatives outside their immediate expertise. Effective task management, timely delivery, and accountability for outcomes are expected. A law graduate with a valid practising certificate from one of the GDS or GDPR-governed locations is mandatory. A good academic background is a plus.

Preferred qualifications include a recognized data protection/data privacy certification (e.g., CIPP/E) or a commitment to obtain one within the first six months. The ability to operate flexibly in ambiguous and changing environments, manage multiple stakeholders independently, and deliver high-quality work under deadlines are highly valued. Willingness to work flexible hours to support global operations is also preferred.