Job Title: UK Data Protection Assistant Director - Rank 63

Job Summary:

Global Delivery Services (GDS) plays a vital role in supporting EY’s various service lines and business operations across the world. GDS Risk Management Services (RMS) majorly operates from 2 cities in India (Gurgaon & Kochi). Risk Management team at EY plays an important role in managing the internal risks of the firm associated with accepting a new client or an engagement or risks associated with any of our on-going audit / non audit engagement. Formed in the Year 2007, the Risk Management team is growing rapidly as a Center of Excellence for all standardized quality / compliance related activities that can be efficiently undertaken from Global Delivery Services location.

Data Protection - With the implementation of the European General Data Protection Regulation (and its implementation into UK legislation via the UK Data Protection Act 2018), data protection is an area of increased risk for the firm. The law has been modernised and strengthened and the penalties have increased and, as a result, the central DP team is looking to build up its compliance function. The imminent departure of the UK from the European Union also has data protection implications for the firm. The main purpose of the role is to partner with the Data Protection leadership team to drive the firm’s compliance with applicable UK privacy legislation by leading and overseeing front-line compliance operations, setting effective governance and controls, and managing a high-performing team that delivers consistent, high-quality outcomes.

Knowledge, skills and experience requirements:

• Significant experience in quality, risk management and compliance processes, including designing and operating data protection monitoring and compliance controls.
• Strong familiarity and applied experience with UK GDPR / Data Protection Act 2018 obligations, and translating legal/regulatory requirements into practical operational guidance.
• Leads, oversees and quality-assures front-line data protection compliance work, such as: data subject requests, potential data incidents, requests to access data, privacy impact assessments and compliance ‘health-checks’, including appropriate prioritisation, resourcing and escalation.
• Owns and leads the development, implementation and continuous improvement of monitoring, testing and compliance processes, including KPIs, reporting and management information.
• Provides clear, pragmatic and risk-based guidance to senior stakeholders, demonstrating sound judgment, discretion and a high degree of professionalism.
• Acts as a senior liaison across client teams, RMS, and firm functional areas, proactively managing stakeholders and driving alignment on data protection risk decisions.
• Reviews, challenges and approves responses to stakeholder and client questions, ensuring consistency with firm policy, regulatory expectations and agreed risk appetite.
• Accountable for delivery of multiple workstreams and outcomes to agreed timelines and quality standards; identifies delivery risks early and drives mitigation.
• Applies analytical and programme/project management methodologies and tools to deliver change, embed controls and track benefits.
• Maintains strong understanding of the firm structure, business strategies, service lines and stakeholders, using this insight to set priorities and influence outcomes.
• Builds and sustains a strong network across RMS and the wider firm, including senior stakeholders, to support delivery and drive adoption of compliance requirements.
• Plans and prioritises work across self and team, manages capacity, and keeps stakeholders informed of status, risks and key decisions.
• Exercises sound judgment over consultations and submission reviews, quickly interpreting relevant firm and regulator RMS rules and policies, and making/endorsing recommendations on appropriate risk-based outcomes.
• Leverages existing policies and guidance, but also researches complex/novel issues and drives resolution through structured stakeholder engagement, escalation and clear decision-making.
• Leads continuous improvement by identifying control gaps, driving root-cause analysis, and implementing sustainable process and technology enhancements.
• Highest standard of ethics, integrity, and values.
• Highly motivated with ability to perform well under pressure; with proven ability to successfully complete multiple tasks in a fast-paced environment.
• Proven ability to establish and maintain a high degree of confidentiality, respect, trust and credibility at all levels.
• Strong team player and proven ability to work with others.
• Ability to work in a global mind-set, maintaining connect with various onshore risk teams.
• Good analytical skills with a logical mind-set.
• Proven people leadership: hiring/onboarding support, coaching and performance management, driving engagement, and building capability to deliver consistent UK data protection compliance outcomes.

Qualifications, certifications and education requirements:

• MBA from a reputed institute or a post-graduate degree.
• 8+ years of prior experience in quality, risk management and compliance processes, with strong data protection knowledge (data protection monitoring, and compliance processes preferred).
• Candidates with exposure to handling international customers / client interaction would be preferred.
• Excellent analytical, interpersonal, and communication (both verbal and written) skills in English.
• Proficient with MS Office (specifically Word, Excel & PowerPoint) and Power BI.
• Proficient in team leadership and people management, including handling escalations, addressing performance and wellbeing concerns, and sustaining high engagement and morale.
• Good research skills and knowledge of databases.