EY seeks a seasoned Associate Director to spearhead our Data Protection & Privacy practice. This pivotal leadership position requires a market-facing, technically adept, and commercially astute professional. You will be instrumental in scaling a rapidly growing cyber capability focused on data protection, privacy, AI data risk, Microsoft Purview, DSPM, DLP/CASB, PKI, privacy operations, and managed services.

Your role will be critical in shaping the future of the practice as a key driver for Data Risk & AI Protection. You will guide clients in governing, safeguarding, monitoring, and demonstrating control over sensitive data across AI, cloud, regulatory, and emerging technology landscapes.

Lead the strategic growth of the Data Protection & Privacy practice, encompassing advisory, implementation, and operational services.

Develop market-leading propositions for AI Data Risk Governance, DSPM, and Microsoft Purview, alongside AI Privacy Protection, PQC/Crypto Agility, and sector-specific data risk solutions.

Collaborate closely with client teams, sector leaders, alliance partners, and senior stakeholders to define pursuits, solution themes, and delivery models.

Direct complex client engagements involving privacy, data protection, DLP/CASB/DSPM, Purview, PKI, encryption, RoPA, DSR, consent, DPIA, and privacy controls.

Foster the creation of reusable assets, accelerators, demo environments, reference architectures, and delivery playbooks.

Build and mentor high-performing teams in privacy, data protection engineering, Microsoft Purview, PKI, DSPM, and AI-enabled data protection.

Enhance practice quality, delivery governance, solution consistency, and ensure measurable client outcomes.

A minimum of 14 years of experience is required in cybersecurity, data protection, privacy, data security, privacy engineering, cloud security, GRC, or technology consulting.

Demonstrated success in leading large client programs, practices, portfolios, or globally distributed delivery teams is essential.

A robust understanding of data protection and privacy domains is crucial, including expertise in DLP, CASB, DSPM, data discovery, classification, data governance, lineage, encryption, PKI, RoPA, DSR, consent, and privacy controls.

Experience with Microsoft Purview, privacy technologies, data security platforms, cloud ecosystems, or managed services is expected.

A strong grasp of AI-era data risks, including AI governance, AI-ready data labelling, DSPM for AI, AI DLP, secure AI adoption, and evolving regulatory requirements, is highly valued.

Exceptional executive presence, commercial acumen, structured communication skills, and the ability to influence senior internal and client stakeholders are necessary.

Relevant certifications such as CIPP, CIPM, CIPT, CISSP, CISM, CISA, ISO 27001, cloud security, or Microsoft Purview-related credentials are preferred.