Risk Analyst - Data Protection Controls (EY GDS)

About the role

EY is looking for an Area/Regional Data Risk Controls Analyst to support the implementation and adoption of its data protection strategy within an assigned geographic area or region. The role helps deploy and operationalise data protection controls, including those that mitigate data exfiltration risk, while addressing regional business needs, regulatory considerations and operational realities. It works with Information Security, technology teams and business stakeholders to turn global requirements into practical regional actions.

Key responsibilities

• Support the deployment, adaptation and operational management of data protection controls across the region, and coordinate with Information Security, technology, product owner and business teams to resolve delivery issues.
• Translate global requirements into regional implementation steps that reflect local business, regulatory and operational needs.
• Track implementation progress, remediation actions, risk mitigation plans, dependencies and milestones, and report on status, risks and follow-up actions to regional and global stakeholders.
• Support the identification, assessment, escalation and resolution of data protection risks and control issues, and ensure remediation is followed through to the responsible owners.
• Act as a regional liaison for control deployment and adoption, and support communications, education and awareness activities.

Required profile

• Demonstrated experience in technology risk management, information security, governance, risk and compliance, data protection or a related discipline.
• Degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
• Experience coordinating stakeholders, tracking remediation and supporting risk or control initiatives.
• Ability to work in a globally distributed team and with stakeholders across the organisation.
• Ideally: a relevant certification (CRISC, CISM, CISA, CISSP or similar), experience with data protection, data loss prevention or control deployment, and awareness of external risk trends and EY's risk priorities.

Required skills

• Working knowledge of frameworks such as ISO or COBIT.
• Strong English, including writing, presentation and communication.
• Attention to detail in tracking actions and reporting status.

What we offer

• A globally diverse team with flexible working arrangements.
• Benefits focused on physical, emotional, financial and social well-being; details depend on the country.
• Continuous learning, development opportunities and a diverse and inclusive culture.