Job Title: Senior Consultant – Data Protection

About EY: At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting-edge security transformation programs and services.

Join us and build an exceptional experience for yourself, and a better working world for all.

The opportunity: As a Senior Consultant in Data Protection you will take a key position in delivering EY’s data protection services, supporting and managing engagements and client delivery. You will also be expected to take a supporting role in building out EYs Data Protection Services, working with alliance partners and advising clients on the current market trends.

Location - London, Manchester or Scotland

The role will see you providing specialist advice as part of a variety of teams- from discrete data protection and privacy focussed activities across large multi-disciplinary teams, to deliver privacy and cyber security transformation programmes.

Key Responsibilities:

Your responsibilities will include but are not limited to:

• Supporting end to end data protection programmes at a UK and global level from design through to build and implementation.

• Delivering discrete elements of programmes and projects.

• Conducting data protection maturity and gap assessments - this may include evaluation of the control landscape – data loss prevention / insider threat and information management solutions; user awareness and training,

• Data discovery programmes and data inventory management to meet regulatory and security requirements

• Data Loss Prevention assessment, strategy and implementation programmes

• Data governance and data ethics review, management and design

• Design and configuration of specific technology solutions associated with data protection – e.g. Microsoft Purview, BigID, OneTrust.

• Privacy technology advisory and implementation activities

• Data Classification, handing and operational engagements to support effective privacy and security strategies

You will work with colleagues in the UK and globally to develop new and innovative compliance services, focusses on emerging legislation and technology as well as maturity existing operations in specific industry propositions that solve client problems/issues and integrates with their overall IT delivery and support strategy.

In addition to the above, you will have an opportunity work across all aspects of Cyber, Technology and business solutions.

Your key responsibilities –

Your responsibilities will include but are not limited to:

• Deliver engagements and build productive relationships with client stakeholders through project delivery

• Contributing to articles and thought pieces

• Working with prospective clients on the planning and delivery phase of engagements

• Creating high quality reports as part of a team, for review by engagement and project leaders.

• Working with senior practice leaders and market leaders in the creation of proposals and marketing material

Skills and attributes for success

• Be professional, quickly establishing personal credibility and demonstrating expertise

• Be a good communicator with the ability to contribute assuredly to technical security and privacy discussions with peers and

• Be a team player who is not only looking to enhance their own career but recognises the value of teamwork, facilitating and encouraging collaboration amongst team members

• Take a practical approach to solving issues and gaining client agreement

• Be able to analyse complex problems and to deliver insightful, practical and sustainable solutions.

• Be confident and effective in recognising and managing potential issues during client assignments

• Proactive identification of risks and issues that may impact delivery of day to day work

To qualify for the role you must have

• Professional experience within a consulting or professional services organisation operating within the Data Protection and privacy space. This includes ability understand, assess and deliver programmes and technical implementation of data protection tooling.

• Experience of delivering data protection programmes across the areas: classification, Data Loss Prevention, CASB and data management. Experience should range from assessment to programme redesign and implementation

• Experience working with others in the development and delivery of complex client solutions and/or proposition development

• A good understanding of privacy processes and requirements, from governance and data subject rights through to data mapping, privacy operations and privacy risk management

Ideally, you’ll also have

• Security and Privacy relation qualifications such as CIPP/E, CIPP/M or Vendor qualifications on DPP software including DLP, Classification solutions and data discovery platforms.

• Broader cybersecurity knowledge and skills across cyber domains including NIST, ISO 27001, cyber assessments, programmes and management

• Experience with Privacy/ data management tooling such as TrustArc, OneTrust and BigID

• Key delivery experience in the following disciplines: security assurance, third party management, DLP, Classification

• Key sector experience in one or more of the following: Government & Public sector / Energy & Utilities / Retail and Consumer products / Life sciences / Telecoms, Media and Technology / Transport

What we look for

• Core consulting skills- Advanced data and evidence management, client management on remediation programmes, driving innovation and continuous improvement

• Proactive – a proactive individual who can get stuck in to client delivery and support the broader practice and solutions.

• Technical skills- Strong technical insight, practical knowledge and specialist capability

• Versatility- Proven ability to adapt and learn in an innovative environment

Please note: The successful candidate must undergo and pass checks in line with SC (Security Check) clearance standards after joining EY. These checks may include, but are not limited to, verification of identity, right to work in the UK, employment history, proof of address may be required and unspent criminal convictions. Candidates must be a UK national or have been a resident in the UK for a minimum of five years and ensure that they have not spent more than six months outside the UK.

What we offer

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.

• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.

• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.

• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

TCCyberUKI2026

Cyber2026