GDS RMS-Senior Associate-GDP-ADR-ICM

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

 

 

 

 

GDS RMS – Global Data Protection – ADR-ICM - Supervising Analyst (65)

 

The opportunity

Our business is highly regulated, and EY is a complex, matrixed organization. Managing risk is of paramount importance to our brand and reputation, and our Risk Management team works side-by-side with the business to do this. Our aim is to enable responsible growth and that means working with the business to identify, monitor and manage risk, and consult and advise. Through oversight of key risk issues and processes related to Risk, Monitoring and

 

Compliance, we help maximize public trust and enable EY to responsibly provide excellent client service.

The Data Risk Mitigation Program has been established in line with the needs of the business to control and govern lifecycle of personal and confidential data at the global level, supporting immediate and future regulatory, legal, risk and operational requirements. We are operating in an increasingly connected world that is changing how to manage risk. With fast-paced technology advancements, new innovations within emerging technologies, and an ever-challenging regulatory environment, it is business critical for our organization to identify not only the risks but the opportunities these present to us.

Supervising Analyst / Senior Associate level candidate to join GDS Risk Management Services (RMS) team supporting Global Risk Management and enable the design and implementation of efforts geared towards mitigating data related risks at the client account level. This will include designing a scalable framework for the application of policy and standards at the client account level and identifying opportunities to leverage existing and/or emerging technology and tools to monitor and assess adherence to the framework and controls on the client account.

 

Your key responsibilities

• Serve as part of the GDS Account Data Risk - Independent Control Monitoring team in executing independent testing of controls related to Data Protection at the client account level
• Execute control testing in line with EY’s global data protection framework
• Consult and collaborate effectively across key data protection stakeholders on testing activities, as needed
• Ability to evaluate and summarize test results and propose remediation activities
• Document findings and observations to contribute to continuous learning/improvement and inform potential enhancements to procedures, processes and controls
• Participate in activities that support a cohesive and balanced approach across Global Risk Management Data Protection and the client account
• Support the development and maintenance of reporting (e.g., Regional/Area risk leaders, Service Line leaders, Account leaders), as appropriate
• Provide input into development of first line risks and controls capabilities related to data risk, including collaboration with the Data Stewardship Office and supporting initiatives such as Services Data Risk

 

Skills and attributes for success

Technical attributes:

• Experience with risk and compliance (e.g., risk assessments, control frameworks, audits, and/or testing)
• Experience with metrics and reporting

 

To qualify for the role, you must have

• Bachelor's degree and approximately 3 + years of related work experience
• Experience or background in either quality, risk management, compliance, cybersecurity 
• Familiarity and experience with the application of data protection law
• Nice to have
  • Experience in privacy and security risk assessment
  • IAPP certifications (either CIPP/E, CIPP/US and/or CIPM)
  • <