Associate Director, Privacy, Data Protection and Information Governance

EY; Toronto; On-site; CAD 160,000 - 210,000; Full time

Benefits offered by this job

Discretionary bonus

Medical, prescription drug and dental

Defined contribution pension plan

Vacation policy

Paid personal days

Job summary

EY Canada is seeking an Associate Director, Privacy, Data Protection and Information Governance in Toronto. This leadership role leads privacy, data protection and information governance initiatives to ensure regulatory compliance and effective risk management across the firm.

You will partner with global teams, design and deliver policies, provide risk-based guidance to professionals, and mentor staff. The role demands strategic thinking, strong communication and the ability to manage multiple

Qualifications

• At least five years of experience in data protection or records governance.
• Knowledge of Canadian privacy laws (federal and provincial).
• Experience implementing data governance or privacy policies.
• Ability to manage multidisciplinary stakeholders and projects.
• Ability to train staff and promote risk-based compliance.

Responsibilities

• Support compliance with data protection laws and EY policies.
• Provide high-quality risk-appropriate advice to professionals.
• Measure effectiveness of tools, monitor and report findings.
• Support Privacy and Data Protection Leader and team.
• Collaborate with EY Global functions and other member firms to implement policies.
• Develop and deliver training and run awareness campaigns.

Skills

Data protection

Privacy

Records management

Risk management

Policy interpretation

Training delivery

Stakeholder management

Communication skills

Job description

Associate Director, Privacy, Data Protection and Information Governance

Location: Toronto

Other locations: Primary Location Only

Date: Oct 22, 2026

Requisition ID: 1755368

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The Opportunity:

The risks in today’s disruptive environment are increasingly multifaced and evolve faster than ever before. We’re continuously evolving the ways we proactively manage risk to address the risk environment of tomorrow. EY Canada’s Risk Management (RM) function is responsible for the management of a variety of risks associated with regulation, data protection, client and engagement acceptance, conflicts, and independence.

Our highly engaged privacy and data protection team is looking to hire a data and information governance professional, with knowledge and experience in privacy and records and information management. As an integral part of the team, this individual will be directly involved with policies, processes and procedures established to maintain the Firm’s compliance with applicable privacy laws and regulations in Canada and records and information management standards. This individual will also serve as a role model by promoting and demonstrating commitment to risk management processes and policies within the Firm.

This job posting relates to an existing vacancy within our organization.

Key Responsibilities:

• Support and promote compliance with various data protection laws and regulations and EY policies and processes related to data protection and records and information management
• Individual will be required to provide appropriate and effective solutions and to consistently provide high-quality risk-appropriate advice to professionals.
• Measure and monitor the effectiveness of tools and processes, conduct regular monitoring and reporting, solicit feedback from stakeholders and recommend improvements.
• Provide direct support to EY Canada’s Privacy and Data Protection Leader and the team.
• Work with EY Global functions, other EY member firms, and local stakeholders to implement global policies, processes and tools within Canada. Manage other special projects on an as needed basis.
• Support specialty practice areas in their compliance with specific data requirements.
• Develop and deliver training to new hires and professional personnel, as required, and deploy data protection and records and information management awareness campaigns on a regular basis.

Skills and attributes for success:

• Strong analytical, problem-solving and critical-thinking skills, with the ability to exercise sound judgment and provide practical, risk-appropriate advice.
• Strong organizational and time-management skills, with the ability to manage multiple priorities and changing deadlines while maintaining accuracy and attention to detail.
• Excellent written and verbal communication skills, including the ability and willingness to educate and train others.
• Strong interpersonal and collaboration skills, with the ability to work effectively with multidisciplinary teams and stakeholders across the organization.
• Strong client-service orientation and the ability to handle difficult or demanding situations professionally.
• Ability to work effectively in a fast-paced, deadline-driven environment while managing sensitive and confidential information with discretion.
• Ability to understand and interpret policies, standards and regulatory requirements and provide clear guidance to stakeholders.
• Adaptability and flexibility to respond to evolving privacy, data governance and records and information management requirements.

To qualify for the role, you must have

• A minimum of five years of experience in data protection, data/information governance, or records and information management.
• Comprehensive and current knowledge of records and information management practices and standards, including classification systems, metadata standards, records retention, preservation and protection requirements.
• Knowledge of Canadian federal and provincial privacy laws and an understanding of evolving privacy and data protection requirements.
• Experience supporting the implementation, monitoring or improvement of data governance, records management, privacy or compliance-related policies and processes.
• Knowledge and understanding of risk management and compliance principles, including experience interpreting policies and providing related guidance.
• Project management experience or demonstrated experience managing data governance, records management, privacy or compliance-related initiatives.
• Knowledge of, or experience working within, a multidisciplinary professional services environment would be an asset.
• Knowledge of CASL, GDPR and California privacy requirements would be considered an asset.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

• Support and coaching from some of the most engaging colleagues in the industry
• Learning opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

Are you ready to shape your future with confidence?

To help create the best experience during the recruitment process, please describe any accommodations you may need.

Inclusiveness at EY

Inclusivenessisat the heart of who we are and how we work.We’recommitted to fostering an environment where differences are valued, policies and practices areequitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting ourneuroinclusionand accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with ethical principles and regulatory requirements.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.