Assistant Director - Data Privacy

About the role

EY's Global Delivery Services (GDS) is looking for an experienced lawyer with expertise in data privacy to join its team supporting the General Counsel's Office. You will work closely with the Global Lead Counsel on Data Incident Response, helping maintain, coordinate and continuously improve the Global Incident Response (IR) Program together with data protection teams worldwide, and supporting multijurisdictional incident responses.

Key responsibilities

• Provide legal oversight and guidance on global data protection and privacy incidents, ensuring compliance with EY policies, laws and regulations.
• Support the Global Deputy Lead Counsel and the Chief Privacy Officer in managing complex, strategically significant data incidents.
• Coordinate with Information Security, Risk Management and General Counsel teams so incidents are handled consistently across jurisdictions.
• Oversee data incident tracking, reporting, metrics and trend analysis for risk management and executive reporting.
• Help implement and improve the global data incident response framework, policies, procedures and governance.
• Communicate the global incident response programme and guide cross-border incident management.
• Identify and escalate significant legal and regulatory issues, including complex jurisdictional matters and emerging regulation.
• Contribute to training, awareness initiatives and guidance materials on data protection obligations.
• Oversee onboarding, capability building and career development, allocate work, manage utilization and coach team members.
• Manage stakeholder relationships and assist in business development.

Required profile

• Qualified lawyer with a consistent strong academic record.
• At least 8 years of post-qualification experience, preferably in a multinational corporation.
• Demonstrated experience managing complex, cross-border data incidents and advising senior stakeholders.
• Experience in client handling and leading a team of legal professionals.
• Ability to work with onshore legal teams and colleagues in other functions, and to work in a complex global organisation across multiple jurisdictions and cultures.

Required skills

• Strong knowledge of EU and international data protection laws, especially the GDPR; familiarity with other key jurisdictions is advantageous.
• Experience interpreting legal requirements on personal data breaches, regulatory investigations, law enforcement requests and crisis management.
• Excellent legal judgement, analytical skills and written and verbal English.
• Understanding of emerging technologies such as cloud computing, RPA and AI.