Data Privacy and Data Governance - Supervising Associate

EY•Hartford, DC

3d•$85,200 - $181,000

About The Position

This position supports EY’s Americas Data Protection & Governance team in a business enablement role. It helps client-serving, leadership, and strategic teams understand and operationalize EY’s data protection, privacy, and governance requirements by providing responsive, practical, risk-based guidance. The role develops and maintains enablement materials, supports consultations, performs monitoring and testing, and analyzes reporting to identify trends, risks, and opportunities for improvement. The position researches changes to laws and regulations and works with stakeholders to assess their impact on firm policies, procedures, training, awareness, and monitoring. It recommends and helps implement improvements to data privacy and governance practices, coordinates and reports related activities to stakeholders, and interacts with executive-level personnel. The role also collaborates with service line quality teams and other firm stakeholders to strengthen enablement, reporting, monitoring, and risk mitigation activities.

Requirements

Bachelor’s degree or equivalent work experience.
Approximately 3–5+ years of related experience.
Ability to learn and understand firm data protection and governance policies and other risk management initiatives.
Ability to independently manage tasks, consultations, reporting activities, and deliverables, and take responsibility for defined outcomes.
Ability to analyze data, evaluate evidence, identify root causes, and communicate findings and recommendations clearly and actionably.
Experience performing control testing, quality assurance reviews, monitoring activities, or compliance assessments in a risk management, privacy, or governance environment.
Understanding of internal controls, risk assessment methodologies, quality management principles, and continuous improvement practices.
Understanding of high-level information security technology issues and the firm’s application architecture for applications processing personal or client-confidential data.
Basic knowledge of project management tools and methodologies.
Problem-solving ability, flexibility, and initiative.
Ability to protect confidential and sensitive information.
Strong research, synthesis, executive communication, and stakeholder management skills.
Advanced proficiency with Microsoft Excel, including pivot tables, lookup formulas, data validation, and data analysis.
Advanced proficiency with PowerPoint and working knowledge of Power BI reporting to synthesize data, identify trends, and create stakeholder-ready materials.
Overtime is required throughout the year and varies based on volume.

Nice To Haves

Privacy certification.
Compliance certification.

Responsibilities

Support data protection business enablement for client-serving teams, strategic accounts, service line quality teams, and functional stakeholders by explaining requirements and providing practical risk-based guidance.
Develop and update enablement materials, communications, playbooks, and presentations that translate policies, processes, and control expectations into clear guidance.
Maintain and improve enablement content and communication plans for consistent messaging across stakeholder groups.
Perform data validation and reconciliation across systems and data sources to ensure management reporting is accurate, complete, and reliable.
Conduct data protection and governance research and draft policies or awareness materials.
Identify issues and risks by comparing facts and circumstances with firm policies, procedures, and data protection and governance expectations.
Identify improvements to data collection, standardization, automation, and governance practices to enhance reporting and decision-making.
Understand complex, non-routine questions from client teams and coordinate appropriate responses through consultation.
Recommend improvements or develop new approaches, policies, or guidance using knowledge of risk management processes, business experience, and stakeholder needs.
Work with service line quality teams to understand and recommend enhancements to enablement, reporting, monitoring, and risk mitigation activities.
Maintain and expand subject-matter knowledge, communicating new developments and their impact to clients and team members.
Build trusted relationships and a network across the team and firm enabling functions to support timely issue resolution and a consistent stakeholder experience.
Complete other related ad hoc projects as assigned.
Use sound judgment in consultations, reporting reviews, control testing, and escalated data protection and governance questions.
Evaluate control effectiveness, assess the significance of findings, and determine appropriate escalation or remediation actions.
Interpret testing results and quality review findings to identify trends, emerging risks, and opportunities to strengthen processes and controls.
Translate business requirements into reporting solutions and visualizations for executive decision-making and operational oversight.
Coordinate work across local or virtual teams by driving next steps, clarifying accountability, and following through on commitments.
Explain firm and regulatory data protection and governance requirements in concise, business-appropriate language.
Support and adapt to change, including adoption of new tools, dashboards, processes, and reporting expectations.
Manage multiple projects and initiatives while remaining prompt, organized, responsive, and accurate.
Review unique and complex situations, consult with client teams, and propose solutions using existing policies and professional knowledge.
Respond to escalated or time-sensitive matters with urgency, discretion, attention to detail, and sound consultation judgment.