Data Privacy & Protection Supervising Associate

EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.  At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.  

Location: Washington, Charlotte, Dallas, Houston, Miami, Boston, Chicago, Philadelphia, Hoboken, McLean, New York

 

Data Protection and Privacy Supervising Associate
 

Risk Management supports our people in managing the risks that arise during our daily working lives. We work closely with all parts of the organization to identify, manage and monitor risk, providing coordinated advice and assistance on independence, conflicts, compliance, regulatory, policy, security issues, as well as dealing with claims and any queries regarding ethics.

 

The opportunity 

We are operating in an increasingly connected world that is changing how to manage risk. With fast-paced technology advancements, new innovations within emerging technologies, and an ever-challenging regulatory environment, it is business critical for our organization to identify not only the risks but the opportunities these present to us. As a Data Protection & Privacy Supervising Associate, you will make educated, thoughtful decisions on Risk Management. Our brand depends on it. It is all part of our long-term commitment to building a better working world and in return, you can expect plenty of opportunities to take on new responsibilities and develop your career. 

 

Your key responsibilities 

As part of the EY Americas Data Protection (Confidentiality, Data Privacy) function, you will manage, independently but with appropriate escalations, the development, implementation, and monitoring of various activities within the EY Americas Data Protection program. This position requires in-depth subject matter knowledge. You will serve as the initial point of contact for EY client servicing teams and will be responsible for interpreting data protection and privacy laws and policies, determining required actions to standard and non-standard situations, and making recommendations based on firm guidance, professional standards, and acquired experience.

 
Skills and attributes for success

• Leads supplier data protection due diligence efforts, including participating in the configuration and deployment of technology used to facilitate due diligence, and partnering with other stakeholders to operate the program;
• Serves as a point of contact for EY client-serving professionals consulting on appropriate data protection practices on engagements and related risk mitigation steps;

• Assesses operational impact of data protection related laws, regulations, industry best practices, policies, and client contractual requirements on engagements,
• Develops and delivers engagement-specific data protection guidance materials and training, and
• Works with engagement teams to identify Data Protection Champions who act as liaisons for the Data Protection function and drive awareness and appropriate data protection behavior within engagement teams.

• Assists in day-to-day operational aspects of the Data Protection Compliance program, including but not limited to:
  • Tracking and analyzing new and/or revised applicable data protection laws, regulations, and standards (e.g., CPRA, VCDPA, HIPAA),
  • Developing and maintaining EY U.S. data protection policies, guidance, training, and awareness communication plan to reflect new and/or changes to data protection laws, regulations, and other related EY policies, 
  • Conducting Data Protection due diligence activities for processes, systems/technology, suppliers, and M&A targets, including conducting Data Protection/Privacy Impact Assessments (PIAs), collaborating with EY’s IT Risk Management, Information Security, Service Lines, functional teams as well as other stakeholders, and recommending appropriate changes,
  • Providing Data Protection by Design (DPbD) guidance to system owners as they design, develop, and/ or upgrade systems,
  • Responding to client inquiries and questions about EY’s Data Protection program; maintaining library of client assurance responses for completeness, accuracy, and appropriateness, and
  • Monitoring and assessing program controls.
• Assists the Data Management function of the Data Protection program, including but not limited to:
  • Documenting, conducting, and assisting others with investigations of data incidents (i.e., instances of loss, theft, or inappropriate disclosure of confidential/personal informa