Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead global data protection initiatives and manage incident response processes.
- Company: Join EY, a global leader in building a better working world.
- Benefits: Flexible work environment, world-class training, and diverse team culture.
- Why this job: Shape the future of data protection while making a real impact.
- Qualifications: Qualified lawyer with 6-8 years of data protection experience.
- Other info: Collaborate globally and enhance your career in a dynamic environment.
The predicted salary is between 60000 - 84000 £ per year.
Overview
Location: London
Other locations: Primary Location Only
Date: Sep 24, 2025
Requisition ID: 1629442
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Join EY and help to build a better working world.
Our global data protection team is seeking a qualified data protection lawyer to advise on and coordinate data protection matters, in particular, to oversee and run the Global Record of Processing Activities (RoPA) Inventory as well as coordinate the Global Incident Response (IR) Process. This involves overseeing a team who are responsible for completing and maintaining EY´s Global RoPA and integration of Privacy Impact Assessment (PIA) records and Third Party Vendor Due Diligence (VDD) data as well as coordinating the work of other resources and EY’s Global Delivery Service (“GDS”) involved in the Global Incident Response Process.
The global data protection team is responsible for the implementation and transformation of EY’s privacy compliance program, which include Binding Corporate Rules. The team works closely with all parts of the business on data protection matters, including both personal data privacy and the protection of client and EY confidential information.
The opportunity
As the Global Legal Counsel – Data Protection RoPA and Incident Response, you will be responsible for overseeing the Records of Processing Activity (RoPA) process and inventory as well as the management of the Global Incident Response (IR) process. You will be working closely with business stakeholders, the other members of the global data protection team, and EY Regional/Local Privacy Leaders as well as data protection resources in EY’s GDS locations in India, Argentina, Philippines and Poland.
Your key responsibilities
- Oversee EY’s global Data Protection program for Records of Processing Activities (ROPA) process and the management of Global Incident Response process.
- Manage the ROPA program which includes an intake process to meet the requirements of Article 30 GDPR to record all processing activities in a centrally managed inventory.
- Support the optimization of the ROPA process to work efficiently within the global EY organization as part of an overall data protection management platform and adapt to new regulatory frameworks such as for AI technologies.
- Work and collaborate with Regional and Country DP Leaders to adapt and integrate local RoPA activities into the Global RoPA.
- Collaborate with key stakeholders to update, implement, and maintain IR methodology as part of the global DP program.
- Communicate the Global IR plan to Member Firms, provide training, and support overall preparedness e.g. through planning and conducting of table top exercises.
- Lead the overall IR policy improvement and process alignments in the Global IR process.
- Manage a variety of internally and externally triggered global incidents in coordination with Member Firms, Information Security., and our business Service Lines.
- Communicate effectively and consistently with key stakeholders.
- Work with a team of data protection resources globally throughout EY;
- Collaborate with team efforts to raise awareness among EY personnel globally regarding the importance of compliance with data protection regulations and EY’s own privacy compliance program;
- Identify / flag legal and regulatory issues surrounding IR and related dataprotection issues and provide appropriate legal advice / work to implement related solutions.
- Escalate to the Chief Privacy Officer and Global DPO any significant incidents, related issues, and plans for their resolution, including as applicable implications of local data protection regulations as aligned with local counsel.
- Provide general support to the global data protection team.
Skills and attributes for success
- Must be legally qualified and holding a current practicing certificate;
- Between 6-8 years of relevant experience either in private legal practice or an in-house role (including proven experience in the field of data protection in cross border situations (including advising on complex matters, such as incident response, DPIAs, etc.);
- Solid knowledge in EU data protection legislation (specifically the GDPR) and ideally familiarity with the legislation of one or more other jurisdictions;
- Ideally, internationally recognized privacy certification, such as CIPP/E and CIPM;
- Experience in conducting internal investigations, and in particular data breach response investigations preferred, but not required.
- Excellent command of the English language;
- Sensitivity to intercultural contacts and communication.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more .
Are you ready to shape your future with confidence? Apply today.
To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
#J-18808-Ljbffr
Global Legal Counsel - Data Protection, Assistant Director employer: Ernst & Young Advisory Services Sdn Bhd
Contact Detail:
Ernst & Young Advisory Services Sdn Bhd Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Global Legal Counsel - Data Protection, Assistant Director
✨Network Like a Pro
Get out there and connect with people in the industry! Attend events, webinars, or even casual meet-ups. The more you engage with others, the better your chances of hearing about job openings before they’re even advertised.
✨Show Off Your Skills
When you get the chance to chat with potential employers, don’t hold back! Share specific examples of how you've tackled data protection challenges in the past. This will help them see you as the perfect fit for their team.
✨Leverage Social Media
Use platforms like LinkedIn to showcase your expertise in data protection. Post articles, share insights, and engage with relevant content. This not only builds your personal brand but also puts you on the radar of recruiters looking for talent.
✨Apply Directly Through Our Website
Don’t forget to check out our careers page at StudySmarter! Applying directly through our website can give you an edge, as it shows your genuine interest in joining our team. Plus, we love seeing familiar names pop up!
We think you need these skills to ace Global Legal Counsel - Data Protection, Assistant Director
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Global Legal Counsel role. Highlight your experience in data protection and any relevant qualifications, like GDPR knowledge or privacy certifications. We want to see how you fit into our team!
Showcase Your Experience: When detailing your work history, focus on your experience with Records of Processing Activities (RoPA) and incident response processes. Use specific examples that demonstrate your ability to manage complex data protection matters. This will help us understand your expertise!
Be Clear and Concise: Keep your application straightforward and to the point. Avoid jargon unless it’s relevant to the role. We appreciate clarity, so make it easy for us to see why you’re the right fit for the position!
Apply Through Our Website: Don’t forget to submit your application through our official website! It’s the best way for us to receive your details and ensures you’re considered for the role. Plus, it’s super easy to do!
How to prepare for a job interview at Ernst & Young Advisory Services Sdn Bhd
✨Know Your GDPR Inside Out
As a candidate for the Global Legal Counsel role, it's crucial to have a solid grasp of GDPR and other relevant data protection laws. Brush up on key articles, especially Article 30, and be prepared to discuss how you would manage the Records of Processing Activities (RoPA) process effectively.
✨Showcase Your Incident Response Experience
Highlight any previous experience you have with incident response processes. Be ready to share specific examples of how you've managed data breaches or coordinated responses in cross-border situations. This will demonstrate your capability to handle the responsibilities outlined in the job description.
✨Collaborate and Communicate
Since this role involves working closely with various stakeholders, emphasise your collaboration skills. Prepare to discuss how you’ve successfully communicated complex legal concepts to non-legal teams and how you’ve worked with diverse groups to achieve common goals.
✨Prepare for Scenario-Based Questions
Expect scenario-based questions that test your problem-solving skills in real-world situations. Think about potential data protection challenges EY might face and how you would approach them. This will show your proactive thinking and readiness to tackle the complexities of the role.
