Technology Consulting (Cyber) - Data Privacy Manager

Job description

EY’s Cyber Security and Data Privacy practice is one of the fastest growing areas of the business with an immediate requirement for data privacy consultants and managers with diverse skills and experience. As part of our team you will be leading engagements and providing advisory support to help our clients to improve their security, privacy and data protection posture to respond to challenging data and security threats. You will provide data privacy and data protection domain expertise and utilise your business insight to work closely with our clients to advise, design, and build pragmatic solutions, and operationalise processes that will give real and tangible benefits for privacy and security enhancement.

Key Requirements:

We are seeking candidates that enjoy working on a wide variety of projects, collaborating with internal and external client teams, building relationships and a desire to learn and progress their career in the field of Privacy, Data Protection and Cyber Security.

Candidates will possess, or demonstrate the capability to meet the below:

·  Demonstrable strong ability to engage with clients and communicate practically and clearly
·  Ability to analyse complex information and identify key and relevant points, including communicating in a relevant and easy to understand manner.
·  Understanding of data protection law and regulation and how to apply it within the business.
·  Minimum of 3+ years’ experience in providing privacy advice, consultancy or delivering solutions, either within a large organisation or to a variety of smaller organisations; Experience working in a data protection or privacy compliance role, including compliance with privacy legislation or relevant professional services experience; or
·  Experience in Data Protection with an awareness of IT Security / Technology
·  Strong analytical and problem-solving skills
·  Excellent communication and project management skills (written and oral)
·  Strong business development skills
·  Broad knowledge of information security, risk management and corporate governance.
·  Good personal organisation, highly motivated to contribute to and grow within rapidly evolving area of key importance
·  Strong collaboration skills, ideally working with global and multi-functional teams.
·  Highly motivated to contribute and grow within a complex area of emerging importance.

Key responsibilities and knowledge areas, depending on experience:

·  Simultaneously working with multiple client engagements of varying size, scope and complexity
·  Providing advice to clients on Data Protection related topics, including but limited to:
·  GDPR compliance, governance, policies and procedures
·  Record of processing activity, data flows and mapping
·  DPIA, Privacy by Design and default, Breach Management and response, DSAR’s etc
·  Identification, implementation and use of Privacy Enhancing Technology to operationalise, automate and mature privacy functions
·  Supporting all aspects of client engagement from scope definition to delivery
·  Oversight and conducting fieldwork including management, guidance and review of junior staff
·  Drafting plans and reports including proposed solutions and recommendations
·  Concisely summarise the results of analysis undertaken (verbal and written)
·  Contribute to the management of client engagement using project management skills
·  Identify challenges, risks, problems and opportunities
·  Liaise and maintain contact with staff at all levels of client organisations
·  Contributing to the continued development of the privacy consultancy
·  Support and Lead business development, including preparation of proposals and tender responses
·  Good working knowledge of Information Security including ISMS and security controls
·  Understanding of Third- party security requirements for privacy/data protection.
·  DLP requirements and solution implementation experience (advantageous),

Experience :

·  5-8 years’ experience in data protection with an in-depth understanding of the GDPR.
·  Experience at this level in Industry, ‘Big 4’ or similar consultancy experience in the Irish market.
·  Track record in supporting the delivery of significant Data Privacy and Data Protection programmes.
·  Government, Health, Financial Services and Pharma experience desirable.
·  Data governance experience a distinct advantage including defining processes for effective data management including availability, usability, consistency, data integrity and data security (CDMP or DGSP certified).

Qualifications:

·  Relevant 3rd level qualification (e.g. law,computer science, cybersecurity, information management, privacy engineering, etc..)
·  CIPPE, CIPM, CIPT certification (at least one required)
·  CISA, CISM, ISO27001 (desirable)
Who we are

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

 

About EY

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.