Assistant Manager, Data Privacy(Legal)

Job Title: Assistant Manager Data Privacy

Group: GDS, supporting the General Counsel’s Office

The opportunity

This is an exciting opportunity to join a fast-growing team within EY. Based in the GCO Enablement team in GDS India, the role will be part of the Data Privacy team and shall support the EY teams from a privacy perspective. This role involves understanding and advising on data privacy related principles, state and federal privacy laws and regulations (including state data breach requirements and applicable sectoral laws and regulations) and the impact of applicable international regulations (e.g., GDPR).  This role also provides advice to address, manage and mitigate identified privacy, data protection and other risks.  The work is critical and requires sound experience in data privacy, data protection, contracts, drafting and related areas.

Your key responsibilities

• Reviewing and negotiating privacy and data protection terms including data processing agreements (DPAs); data transfer, data protection, privacy notices and related agreements
• Working collaboratively with internal clients to develop strategies to address identified issues
• Advising internal EY teams and leaders of the key legal risks of the proposed project or contract, including the legal and regulatory issues that need to be addressed early in the process
• Assisting with PIA assessments, questionnaires, disputes and breaches
• Effectively managing workflow, including multiple projects, in a proactive and highly responsive manner
• Providing practical advice and guidance on privacy and related issues to internal clients and stakeholders, and developing solutions to such issues while effectively managing legal and practical business considerations
• Advising on applicable state, federal and international privacy laws and regulations and related matters as they relate to EY, including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and Binding Corporate Rules (BCRs)
• Attending GCO meetings and training sessions
• Assist with creating, facilitating and delivering training to the team members.
• Work with a team of cross functional data protection professionals.

Skills and attributes for success

• We are looking for someone who has the following attributes and skills:
• Provide advice based on the appropriate balance of risk mitigation and business interests on a real-time basis
• Use of independent judgment and thinking applied to resolution of issues
• Identify the projects that require communication to and consultation within GCO or with other EY member firms or other functions (e.g. independence, finance, risk management) and advise EY internal teams and functions on how these risks can be addressed
• Escalate identified key issues and contractual provisions in accordance with EY policies/protocols
• Work independently on projects, with limited direction, and draw upon extensive knowledge and experience to deliver quality risk management 

To qualify you must have

• Excellent organizational skills; demonstrated ability to create, plan and successfully execute projects; and the ability to meet multiple deadlines in a fast-paced environment
• Excellent verbal and written communication skills, and the ability to interface and communicate effectively and diplomatically with all levels of EY personnel
• High degree of cultural and emotional intelligence
• Ability to understand, and accurately articulate and document, complex concepts
• Ability to assess size and scope of contemplated transactions and to tailor approach accordingly
• Understanding of when to consult with and seek the input of others
• Ability to prioritize multiple tasks with competing deadlines
• Ability to foster teamwork and maintain effective working relationships with internal clients/stakeholders
• Responsiveness with ability to manage high workload volumes efficiently and effectively
• Solution-oriented thinking, with a focus on exceptional client service

Experience and qualification

• Legal graduate with 5-8 years of substantive experience in data privacy domain and an in-depth knowledge of privacy laws – including GDPR, CCPA etc
• Experience with privacy laws and regulations (including data protection, cross-border data transfers, data retention, data sharing and incident response) and workload/project management
• Keen interest in technology, privacy and IT security related aspects
• Previous experience of working in a financial or professional services environment
• Preferably relevant certifications on privacy (CIPP)

What you can look for

• You will be provided with training and coaching on the job.
• A Team of highly qualified individuals with energy and enthusiasm to learn new things in this fast-moving environment
• An opportunity to be a part of a global company and interact with privacy, legal professional and business team across the globe.

What working at EY offers 

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across eight countries and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.