The opportunity
As the Global Legal Counsel – Data Protection RoPA and Incident Response, you will be responsible for overseeing the Records of Processing Activity (RoPA) process and inventory as well as the management of the Global Incident Response (IR) process. You will be working closely with business stakeholders, the other members of the global data protection team, and EY Regional/Local Privacy Leaders as well as data protection resources in EY’s GDS locations in India, Argentina, Philippines and Poland.
Your key responsibilities
1. Oversee EY’s global Data Protection program for Records of Processing Activities (ROPA) process and the management of Global Incident Response process.
2. Manage the ROPA program which includes an intake process to meet the requirements of Article 30 GDPR to record all processing activities in a centrally managed inventory.
3. Support the optimization of the ROPA process to work efficiently within the global EY organization as part of an overall data protection management platform and adapt to new regulatory frameworks such as for AI technologies.
4. Work and collaborate with Regional and Country DP Leaders to adapt and integrate local RoPA activities into the Global RoPA.
5. Collaborate with key stakeholders to update, implement, and maintain IR methodology as part of the global DP program.
6. Communicate the Global IR plan to Member Firms, provide training, and support overall preparedness through planning and conducting of table top exercises.
7. Lead the overall IR policy improvement and process alignments in the Global IR process.
8. Manage a variety of internally and externally triggered global incidents in coordination with Member Firms, Information Security., and our business Service Lines.
9. Communicate effectively and consistently with key stakeholders.
10. Work with a team of data protection resources globally throughout EY;
11. Collaborate with team efforts to raise awareness among EY personnel globally regarding the importance of compliance with data protection regulations and EY’s own privacy compliance program;
12. Identify / flag legal and regulatory issues surrounding IR and related dataprotection issues and provide appropriate legal advice / work to implement related solutions.;
13. Escalate to the Chief Privacy Officer and Global DPO any significant incidents, related issues, and plans for their resolution, including as applicable implications of local data protection regulations as aligned with local ;
14. Provide general support to the global data protection team.
Skills and attributes for success
15. Must be legally qualified and holding a current practicing certificate;
16. Between 6-8 years of relevant experience either in private legal practice or an in-house role (including proven experience in the field of data protection in cross border situations (including advising on complex matters, such as incident response, DPIAs, etc.,);
17. Solid knowledge in EU data protection legislation (specifically the GDPR) and ideally familiarity with the legislation of one or more other jurisdictions;
18. Ideally, internationally recognized privacy certification, such as CIPP/E and CIPM;
19. Experience in conducting internal investigations, and in particular data breach response investigations preferred, but not required.
20. Strong project management skills;
21. Excellent command of the English language;
22. Sensitivity to intercultural contacts and communication.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
Are you ready to shape your future with confidence? Apply today.
To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.