Assistant Director – Global Delivery Services Data Protection Counsel

About the role

Join EY's Global Delivery Services (GDS) as an Assistant Director supporting the Data Protection portfolio. You will lead the Data Protection Incident Response function across multiple GDS locations, providing strategic legal advice and ensuring compliance with local data protection laws and EY global guidance.

Key responsibilities

• Manage and oversee Data Protection Incident Response activities across global sites, including Argentina, Hungary, India, Mexico, the Philippines, Poland, Spain, Sri Lanka, the UK and others.
• Prepare and maintain incident response documentation such as policies, protocols, RACIs and escalation matrices.
• Ensure legal professional privilege is established, assess reportability to regulators and data subjects, and oversee any required reporting.
• Provide legal approval for investigative steps and act as escalation point for complex or sensitive incidents.
• Collaborate with internal stakeholders, including the Global Deputy Lead Counsel – Data Protection Incident Response and the GDS Chief Privacy Officer.

Required profile

• Approximately 10 years post‑qualification experience, with at least five years in a data protection incident response legal counsel role.
• Strong understanding of data protection principles and the ability to apply controls to protect confidential and personal data.
• In‑depth knowledge of the GDPR and related data protection requirements.
• Experience conducting internal investigations, particularly data breach response investigations (preferred).
• Ability to work in an unstructured, complex environment and think creatively.

Required skills

What we offer

• Opportunity to work on a global scale within a leading professional services firm.
• Access to EY’s inclusive culture, technology, and career development resources.
• Exposure to cross‑functional teams and a diverse set of international locations.