[Hiring] Data Privacy and Data Governance - Supervising Associate @EY

Role Description

This position supports the Americas Data Protection & Governance team as a business enablement role focused on helping client-serving, leadership and other strategic teams understand and operationalize EY data protection, privacy and governance requirements. The position will provide responsive, solutions-oriented guidance; translate data protection requirements into practical enablement materials; support consultations and perform monitoring and testing activities and perform reporting, monitoring, and analysis to identify trends, risks, and opportunities for improvement. The position will participate in various discussions regarding the impact of changes to laws and regulations with stakeholders and consider the resulting changes to firm policies, procedures, training, awareness and monitoring activities. The position will develop and recommend innovative solutions to address Data Privacy and Data Governance needs and collaborate with stakeholders to evaluate and implement those recommendations. The position will assist in the coordination and reporting of various Data Privacy Protection activities to stakeholders. The position interacts with executive level personnel.

Your key responsibilities

• Supports data protection business enablement for client-serving teams, strategic accounts, service line quality teams, and functional stakeholders by helping them understand requirements and apply practical risk-based guidance.
• Develops and updates enablement materials, communications, playbooks, and presentations that translate data protection and governance policy, process, and control expectations into clear, actionable guidance for business teams.
• Maintains, organizes, and continuously improves the data protection and governance enablement content and communication plans to support consistent messaging across stakeholder groups.
• Performs data validation and reconciliation activities across multiple systems and data sources to ensure accuracy, completeness, and reliability of management reporting.
• Conducts data protection and governance research and drafts policies and/or awareness materials.
• Identifies and extracts key issues and risks related to the risk management function or process by comparing facts and circumstances to current firm policies, procedures and data protection and governance expectations.
• Identifies opportunities to improve data collection, standardization, automation, and governance practices to enhance reporting quality and decision-making.
• Understands complex, non-routine questions from client teams regarding data protection and governance and coordinates appropriate responses through consultation.
• Proposes suggestions and solutions for improvement and/or develops new approaches and/or policies/guidance by leveraging their knowledge of existing risk management processes, business experience and stakeholder needs.
• Interacts with various service line quality teams in all of the above processes so as to understand and recommend enhancements to various enablement, reporting, monitoring, and risk mitigation activities.
• Maintains and expands current knowledge of field of expertise and communicates new developments and resulting impact to clients and team members.
• Develops trusted relationships and builds a network of people within the team and across the firm enabling functions to support timely issue resolution and consistent stakeholder experience.
• Other ad hoc related projects, as assigned.

Skills and attributes for success

• Applies sound judgment to business enablement consultations, reporting reviews, control testing activities, and escalated data protection and governance questions, with an enhanced understanding of EY data protection and governance requirements, stakeholder needs, and practical risk mitigation options.
• Exercises judgment in evaluating control effectiveness, assessing the significance of identified issues, and determining appropriate escalation or remediation actions.
• Interprets testing results and quality review findings to identify trends, emerging risks, and opportunities to strengthen data protection and governance processes and controls.
• Translates business requirements into meaningful reporting solutions and visualizations that support executive decision-making and operational oversight.
• Demonstrates ownership and natural authority when coordinating work across local or virtual teams, including driving next steps, clarifying accountability, and following through on commitments.
• Understanding of key requirements of firm and regulator’s data protection and governance and can explain them in concise, business-appropriate language for client-serving teams.
• Ability to drive and adapt to change reinforce change in a fast-moving enablement environment, including adoption of new tools, dashboards, processes, and reporting expectations.
• Strong written and verbal communication skills, including the ability to listen effectively, interpret stakeholder needs, frame issues clearly, and tailor messaging for business, risk, and executive audiences.
• Develop a broad knowledge of the firm and its practices.
• Ability to successfully handle multiple projects and initiatives simultaneously while remaining prompt, organized, responsive, and accurate.
• Will reference existing policies and their knowledge and experience to review unique and complex situations and, through specific consultation and inquiries of the client team, propose solutions to issues.
• May receive escalated or time-sensitive data protection and governance matters and is expected to respond with appropriate urgency, discretion, attention to detail, and sound consultation judgment.

Qualifications

• Bachelor’s degree or equivalent work experience.
• Approximately 3-5+ years related experience.
• Overtime will be required throughout the year and will vary based on volume.
• Ability to learn and understand the firm and data protection and governance policies as well as familiarity with other risk management initiatives outside of area of expertise.
• Ability to independently manage tasks, consultations, reporting activities, and deliverables in a timely manner and take responsibility for defined outcomes.
• Ability to analyze data, evaluate evidence, identify root causes, and communicate findings and recommendations in a clear and actionable manner.
• Experience performing control testing, quality assurance reviews, monitoring activities, or compliance assessments within a risk management, privacy, or governance environment.
• Understanding of internal controls, risk assessment methodologies, quality management principles, and continuous improvement practices.
• Requires an understanding of the high-level technology issues surrounding information security as well as the firm’s application architecture for those applications which process personal or client confidential data.
• Basic knowledge of project management tools and methodologies.
• Problem solving, flexibility and initiative.
• Ability to keep confidential sensitive information.
• Strong research, synthesis, executive communication, and stakeholder management skills.
• Advanced proficiency with Microsoft Excel, including pivot tables, lookup formulas, data validation, and data analysis.
• Advanced proficiency with PowerPoint; and working knowledge of Power BI reporting to synthesize data, identify trends, and create stakeholder-ready materials.

Benefits

• Comprehensive compensation and benefits package.
• Base salary range for this job varies by location:
• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $102,200 to $173,800.
• Bay Area California offices – $106,500 to $181,000.
• All other office locations in the US, including Sacramento – $85,200 to $159,300.
• Individual salaries determined through a variety of factors including education, experience, knowledge, skills, and geography.
• Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
• Flexible vacation policy allowing you to decide how much vacation time you need.
• Time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence.