RMS - US Data Protection Senior Associate (VDD) - EY GDS

EY GDS CS ARGENTINA S.R.L.; Buenos Aires; On-site; ARS 600,000 - 900,000; Full time

Job summary

EY GDS Argentina busca un Senior Associate para liderar iniciativas de protección de datos, gestionar la gobernanza de las Actividades de Tratamiento (ROPA) y realizar Evaluaciones de Impacto de Privacidad (PIA) y Debida Diligencia de Proveedores.

Trabajará en colaboración con el equipo de US Data Protection, redactará avisos de privacidad y métricas, y asegurará cumplimiento normativo en toda la organización, con énfasis en auditoría y mejora de procesos.

Qualifications

• 3–5 years of experience in Data Risk, Data Governance, Data Protection, Privacy or related fields.
• Fluent English (C1 or above) written and spoken.

Responsibilities

• Lead compliance initiatives and governance of Records of Processing Activities (ROPA).
• Manage Privacy Impact Assessments (PIA) and Data Protection Vendor Due Diligence.
• Draft privacy notices and PIA documentation; review responses for completeness and accuracy.
• Coordinate with system owners and project teams to align privacy initiatives with business goals.
• Prepare metrics, dashboards and reports on PIA volume, timelines, and ROPA updates.

Skills

Data protection

Regulatory knowledge

English communication

Risk assessment

Governance

MS Office

Stakeholder engagement

Job description

The opportunity

This role requires regular interaction with US Data Protection team on day-to-day basis to understand business requirements and deliver data protection solutions. The Senior Associate will lead compliance initiatives, manage privacy assessments, and ensure robust governance of Records of Processing Activities (ROPA)., Privacy Impact Assessment (PIA), Data Protection Vendor Due Diligence.

Your key responsibilities

• Expertise in Data Protection Regulations. Stay ahead of regulatory changes and advise on strategic compliance improvements. Knowledge of US and global privacy laws (e.g., GDPR, CCPA, PDPL, DPDPA).
• Timely delivery of quality work and achieving the objectives set based on the determined process methodology which includes the PIA assessments Vendor Due Diligence and ROPA related activities.
• Oversee the accurate and up-to-date documentation of data processing activities across teams, including collecting, validating, and updating processing activity records and ensuring compliance with applicable data protection laws; Draft the Privacy notices and other related PIA documentation.
• Review PIA responses for completeness, accuracy, and alignment with privacy requirements.
• Efficient handling of communications and timely response to or escalation of inquiries.
• Collaborate with system owners and project teams to align privacy initiatives with organizational objectives as well as to gather missing information, follow up on action items, and track open tasks through completion.
• Collaborate on the process gaps and lead initiatives for automation and process improvements; assist with preparation of metrics, dashboards, and periodic reports for leadership on PIA volume, processing timelines, and ROPA updates.
• Stay informed on emerging technologies and assess privacy implications
• Proactively plan and prioritize daily tasks and keep the team informed of the status.

Skills and attributes for success

• Strong decision-making and problem-solving capabilities, with a focus on risk assessment and mitigation.
• Demonstrated analytical skills, including the ability to interpret complex information, identify issues, and recommend next steps.
• Excellent English communication skills (verbal and written) for stakeholder engagement
• Familiarity with compliance and privacy assessment.
• Proficiency in MS Office tools (Excel, PowerPoint, Word)
• Quality focus and attention to details and ability to manage multiple priorities and deadlines in a fast-paced environment.
• Flexibility to adapt to changing processes and tools.

Collaborative mindset and leadership qualities.

To qualify for the role, you must have

• Fluent English (C1 or above).
• 3-5 years of experience in Data Risk, Data Governance, Data Protection, Privacy, Compliance, Information Security, Technology Risk, Data Stewardship, or related areas.
• Experience supporting implementation of governance, compliance, risk management, or data protection activities.
• Experience working with stakeholders across different business, risk, and technology functions.
• Ability to coordinate activities, manage deliverables, and drive assigned responsibilities with limited supervision.

Ideally, you'll also have

• Experience working in a global or matrix organization.
• Familiarity with data governance, privacy, information security, or regulatory compliance frameworks.
• Experience supporting process improvement, change management, or transformation initiatives.
• Exposure to client-facing or stakeholder-facing environments.
• IAPP certification (CIPP/E, CIPP/US, CIPM) or similar qualifications.