Cyber Security Manager – Data Protection & Privacy Platforms

About the role

EY is seeking a Manager for its Cyber Security team with a strong focus on Data Protection and Privacy Platforms Engineering. The role involves designing, implementing and operating enterprise‑scale solutions that safeguard sensitive data across endpoints, networks, cloud, applications and AI‑enabled platforms.

Key responsibilities

• Lead the design, implementation and engineering of Data Loss Prevention (DLP), data discovery, classification and privacy tooling.
• Deploy and administer DLP solutions across endpoint, email, network, cloud and SaaS environments.
• Design and operationalise data discovery and classification programmes for structured and unstructured data.
• Engineer privacy platforms supporting consent management, data subject rights, records of processing and privacy workflows.
• Implement Privacy Enhancing Technologies such as tokenisation, pseudonymisation, anonymisation, encryption and data masking.
• Integrate data protection and privacy platforms with cloud, data lakes, analytics and AI/ML pipelines.
• Manage Microsoft Purview Information Protection for labeling, classification and policy enforcement.
• Configure policy‑driven controls aligned with GDPR and other regional privacy regulations.
• Support incident response and investigations related to data leakage or privacy breaches.
• Collaborate with security architecture, cloud, data, legal and compliance teams to ensure end‑to‑end data protection.

Required profile

• Manager‑level professional with proven experience in enterprise data protection and privacy platform engineering.
• Strong client‑facing skills and ability to work with cross‑functional security, cloud, data and compliance teams.
• Experience delivering solutions in regulated environments (e.g., GDPR).

Required skills

• Data Loss Prevention (DLP) technologies
• Data discovery and classification tools
• Privacy management platforms and workflows
• Privacy Enhancing Technologies (tokenisation, pseudonymisation, anonymisation, encryption, data masking)
• Microsoft Purview Information Protection (labeling)
• Cloud integration (public cloud, SaaS)
• Data lakes, analytics platforms and AI/ML pipelines
• Incident response and investigation