Data Privacy and Data Governance - Supervising Associate

Location: Anywhere in Country

The opportunity

This position supports the Americas Data Protection & Governance team as a business enablement role focused on helping client-serving, leadership and other strategic teams understand and operationalize EY data protection, privacy and governance requirements. The position will provide responsive, solutions-oriented guidance; translate data protection requirements into practical enablement materials; support consultations and perform monitoring and testing activities and perform reporting, monitoring, and analysis to identify trends, risks, and opportunities for improvement. The position will participate in various discussions regarding the impact of changes to laws and regulations with stakeholders and consider the resulting changes to firm policies, procedures, training, awareness and monitoring activities. The position will develop and recommend innovative solutions to address Data Privacy and Data Governance needs and collaborate with stakeholders to evaluate and implement those recommendations. The position will assist in the coordination and reporting of various Data Privacy Protection activities to stakeholders. The position interacts with executive level personnel.

Your key responsibilities

• Supports data protection business enablement for client-serving teams, strategic accounts, service line quality teams, and functional stakeholders by helping them understand requirements and apply practical risk-based guidance
• Develops and updates enablement materials, communications, playbooks, and presentations that translate data protection and governance policy, process, and control expectations into clear, actionable guidance for business teams.
• Maintains, organizes, and continuously improves the data protection and governance enablement content and communication plans to support consistent messaging across stakeholder groups
• Performs data validation and reconciliation activities across multiple systems and data sources to ensure accuracy, completeness, and reliability of management reporting.
• Conducts data protection and governance research and drafts policies and/or awareness materials
• Identify and extract key issues and risks related to the risk management function or process by comparing facts and circumstances to current firm policies, procedures and data protection and governance expectations
• Identifies opportunities to improve data collection, standardization, automation, and governance practices to enhance reporting quality and decision-making.
• Understand complex, non-routine questions from client teams regarding data protection and governance and coordinates appropriate responses through consultation
• Propose suggestions and solutions for improvement and/or develop new approaches and/or policies/guidance by leveraging their knowledge of existing risk management processes, business experience and stakeholder needs
• Interacts with various service line quality teams in all of the above processes so as to understand and recommend enhancements to various enablement, reporting, monitoring, and risk mitigation activities.
• Maintains and expands current knowledge of field of expertise and communicates new developments and resulting impact to clients and team members.
• Develops trusted relationships and builds a network of people within the team and across the firm enabling functions to support timely issue resolution and consistent stakeholder experience.
• Other ad hoc related projects, as assigned

Skills and attributes for success

• Applies sound judgment to business enablement consultations, reporting reviews, control testing activities, and escalated data protection and governance questions, with an enhanced understanding of EY data protection and governance requirements, stakeholder needs, and practical risk mitigation options.
• Exercises judgment in evaluating control effectiveness, assessing the significance of identified issues, and determining appropriate escalation or remediation actions.
• Interprets testing results and quality review findings to identify trends, emerging risks, and opportunities to strengthen data protection and governance processes and controls.
• Translates business requirements into meaningful reporting solutions and visualizations that support executive decision-making and operational oversight.
• Demonstrates ownership and natural authority when coordinating work across local or virtual teams, including driving next steps, clarifying accountability, and following through on commitments.
• Understanding of key requirements of firm and regulator's data protection and governance and can explain them in concise, business-appropriate language for client-serving teams.
• Ability to drive and adapt to change reinforce change in a fast-moving enablement environment, including adoption of new tools, dashboards, processes, and reporting expectations.
• Strong written and verbal communication skills, including the ability to listen effectively, interpret stakeholder needs, frame issues clearly, and tailor messaging for business, risk, and executive audiences.
• Develop a broad knowledge of the firm and its practices
• Ability to successfully handle multiple projects and initiatives simultaneously while remaining prompt, organized, responsive, and accurate.
• Will reference existing policies and their knowledge and experience to review unique and complex situations and, through specific consultation and inquiries of the client team, propose solutions to issues.
• May receive escalated or time-sensitive data protection and governance matters and is expected to respond with appropriate urgency, discretion, attention to detail, and sound consultation judgment.

To qualify for the role, you must have

• Bachelor's degree or equivalent work experience
• Approximately 3-5+ years related experience
• Overtime will be required throughout the year and will vary based on volume
• Ability to learn and understand the firm and data protection and governance polices as well as familiarity with other risk management initiatives outside of area of expertise
• Ability to independently manage tasks, consultations, reporting activities, and deliverables in a timely manner and take responsibility for defined outcomes.
• Ability to analyze data, evaluate evidence, identify root causes, and communicate findings and recommendations in a clear and actionable manner.
• Experience performing control testing, quality assurance reviews, monitoring activities, or compliance assessments within a risk management, privacy, or governance environment.
• Understanding of internal controls, risk assessment methodologies, quality management principles, and continuous improvement practices.
• Requires an understanding the high level technology issues surrounding information security as well as the firm's application architecture for those applications which process personal or client confidential data.
• Basic knowledge of project management tools and methodologies
• Problem solving, flexibility and initiative
• Ability to keep confidential sensitive information
• Strong research, synthesis, executive communication, and stakeholder management skills
• Advanced proficiency with Microsoft Excel, including pivot tables, lookup formulas, data validation, and data analysis
• Advanced proficiency with PowerPoint; and working knowledge of Power BI reporting to synthesize data, identify trends, and create stakeholder-ready materials

Ideally, you'll also have

• Privacy certification and compliance certification preferred

What we offer you

• We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job is:
• • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices - $102,200 to $173,800
  • Bay Area California offices - $106,500 to $181,000
  • All other offices locations in the US, including Sacramento - $85,200 to $159,300
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
• Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

Are you ready to shape your future with confidence? Apply today.

• To make the most of your application experience, please limit yourself to two applications within a six-month period.
• EY accepts applications for this position on an on-going basis.
• For those living in California, please click here for additional information.
• At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.