Senior Consultant - Cybersecurity, data protection and privacy

at  EY

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
With rapidly changing data threats, clients from all industries look to us for trusted solutions for their increasingly complex risks. You will have access to our robust platform to advise clients on managing data protection and privacy, enhancing maturity, and improving efficiency. You will belong to an international connected team of specialists helping our clients with their most complex data protection and privacy needs and contributing toward their business resilience.

THE OPPORTUNITY

We are actively seeking a Senior to join our Cybersecurity team specifically the Data Protection and Privacy specialty. You’ll work alongside respected industry professionals, learning about and applying leading practices to better manage people, processes and technology capabilities within the data protection and privacy domains. You’ll gain insights into the design and operations of data protection and privacy programs and strategies in a variety of industries and learn how to design measurable, sustainable programs to keep up with the constantly evolving privacy landscape.
This position falls within our Consulting practice, which helps our clients enhance the effectiveness of operations functions by assisting them as they shift their emphasis from transaction-level control, processing and reporting to more value driven, decision support and analytics.

SKILLS AND ATTRIBUTES FOR SUCCESS

Client Responsibilities

• Consistently deliver quality client services.
• Stay abreast of current business and industry trends relevant to the client’s business.
• Demonstrate technical capabilities and professional knowledge. Demonstrate ability to assimilate to new knowledge.
• Remain current on new developments in advisory services capabilities and industry knowledge.
• Demonstrate and apply a thorough understanding of complex data processing systems. Use knowledge of the current data processing environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations.

To qualify for the role, you must have

• A Bachelor’s degree in Law (preferably) or in Computer Science, Management Science, Information Security, Data, Business, Ethics or a related field and 5 years of progressive, post-baccalaureate work experience. Alternatively, will accept a Master’s degree in Computer Science, Management Science, Data, Business, Ethics, Law, or a related field and 2 to 3 years of work experience.
• Knowledge and 2 to 3 years of hands-on experience in one or more of the following areas:
• Assessing client risk and compliance against privacy regulations.
• Designing or operationalizing functional privacy within or on behalf of a business.
• Providing support of privacy enhancing technology (PET).
• Knowledge and 2 to 3 years of practical experience with common frameworks, standards and methodologies used in the data protection and privacy field.
• Practical experience with conducting risk assessments and testing of data protection and privacy controls
• Excellent analytical skills and knowledge of data analytics methods
• Ideally possess one of the following certifications: CIPP (Canada), CIPM or CIPT.
• Solid knowledge and experience presenting using MS Power Point, Excel and Visio.
• Solid oral and written communication skills.
• Experience on writing reports on findings and analysis of privacy issues.

YOUR KEY RESPONSIBILITIES

As a Cybersecurity, data protection and privacy senior you’ll deliver client engagements as well as internal projects. You will help clients gain insights into their privacy programs and capabilities to maintain compliance to local and global privacy regulations. Consult with privacy and cyber managers to determine the role of IT systems in an organization. Research emerging technologies to determine if installing them can increase the organization’s efficiency and effectiveness and identify any potential impact in privacy. Advise clients on managing their privacy programs to mitigate their business risks. Assess privacy programs and strategies using our proprietary framework, design solutions to remediate gaps or enhance maturity of specific privacy capabilities, improve measurements and monitoring, and develop sustainable processes to enable our clients to achieve business goals and mitigate their risks.

Client Responsibilities

• Consistently deliver quality client services.
• Stay abreast of current business and industry trends relevant to the client’s business.
• Demonstrate technical capabilities and professional knowledge. Demonstrate ability to assimilate to new knowledge.
• Remain current on new developments in advisory services capabilities and industry knowledge.
• Demonstrate and apply a thorough understanding of complex data processing systems. Use knowledge of the current data processing environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations

To qualify for the role, you must have

• A Bachelor’s degree in Law (preferably) or in Computer Science, Management Science, Information Security, Data, Business, Ethics or a related field and 5 years of progressive, post-baccalaureate work experience. Alternatively, will accept a Master’s degree in Computer Science, Management Science, Data, Business, Ethics, Law, or a related field and 2 to 3 years of work experience.
• Knowledge and 2 to 3 years of hands-on experience in one or more of the following areas:
• Assessing client risk and compliance against privacy regulations.
• Designing or operationalizing functional privacy within or on behalf of a business.
• Providing support of privacy enhancing technology (PET).
• Knowledge and 2 to 3 years of practical experience with common frameworks, standards and methodologies used in the data protection and privacy field.
• Practical experience with conducting risk assessments and testing of data protection and privacy controls
• Excellent analytical skills and knowledge of data analytics methods
• Ideally possess one of the following certifications: CIPP (Canada), CIPM or CIPT.
• Solid knowledge and experience presenting using MS Power Point, Excel and Visio.
• Solid oral and written communication skills.
• Experience on writing reports on findings and analysis of privacy issues