Cybersecurity - Data Protection - Manager (Data Protection Specialist)

Ernst & Young Advisory Services Sdn Bhd; Toronto; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Total Rewards package

Medical & Dental

Pension plan

Generous vacation

Job summary

Ernst & Young Advisory Services Sdn Bhd in Toronto is seeking a Cybersecurity Manager focused on Data Protection. You will shape data protection strategies, lead DLP implementations, and drive risk assessments across client engagements.

You will mentor teams, manage stakeholders, and ensure regulatory alignment with GDPR/CCPA standards while delivering complex projects.

Qualifications

• 5+ years in cybersecurity with at least 4 years in data protection and strategy.
• Bachelor’s degree in Information Technology, Cybersecurity, or related field.
• Deep knowledge of DLP vendors and GDPR/CCPA regulatory requirements.
• Proven project management skills across multiple initiatives.

Responsibilities

• Design and implement data protection strategies aligned with business goals and regs.
• Conduct data protection risk assessments and mitigation planning.
• Lead DLP solution implementations tailored to client needs.
• Manage DLP vendor relationships and evaluations.
• Collaborate with IT, legal, and compliance for cohesive data protection.
• Develop training programs to raise awareness of policies and procedures.
• Stay updated on regulatory changes affecting data protection.
• Mentor junior team members and guide delivery of complex projects.

Skills

Data Protection

Risk Assessments

DLP Implementation

Vendor Management

Stakeholder Engagement

Training

Regulatory Compliance

Team Leadership

Project Management

Client Relationships

Strategic Thinking

Problem Solving

Communication Skills

Certifications

Education

Bachelor’s degree in IT or Cybersecurity

Tools

DLP Solutions

Job description

Cybersecurity - Data Protection - Manager (Data Protection Specialist)

Location: Toronto

Other locations: Primary Location Only

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

EY Canada’s Cybersecurity practice is seeking an experienced and technically proficient Manager for our Data Protection (DP) team. The ideal candidate will have extensive experience in developing and implementing data protection strategies, conducting assessments, and a strong technical understanding of the Data Loss Prevention (DLP) vendor market. This role requires a strategic thinker with a strong technical background and the ability to lead projects and teams effectively.

Your key responsibilities:

Data Protection Strategy Development: Design and implement comprehensive data protection strategies that align with organizational goals and regulatory requirements.

Risk Assessments: Conduct thorough data protection assessments to identify vulnerabilities and recommend mitigation strategies to enhance data security.

DLP Implementation: Lead the implementation of DLP solutions, ensuring they are tailored to meet the specific needs of clients while adhering to industry best practices.

Vendor Management: Maintain a deep understanding of the DLP vendor market, evaluating and recommending solutions that best fit client requirements.

Stakeholder Engagement: Collaborate with cross-functional teams, including IT, legal, and compliance, to provide a cohesive approach to data protection.

Training and Awareness: Develop and deliver training programs to enhance awareness of data protection policies and procedures among employees.

Regulatory Compliance: Stay abreast of data protection regulations and how they relate to data protection.

Team Leadership:Mentor and guide junior team members, fostering a culture of continuous learning and professional development.

To qualify for the role you must have:

• Extensive Cybersecurity Experience: A minimum of 5 years of hands-on experience in cybersecurity, with at least 4 years focused on data protection with a focus on strategy development and assessments.
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field;
• In-depth knowledge of the DLP vendor landscape and experience in implementing DLP solutions.
• Strong understanding of data protection regulations (e.g., GDPR, CCPA) and leading practices.
• Proven project management skills, with the ability to manage multiple projects simultaneously. Including design, implementation, and optimization of data governance, data security, and risk and compliance solutions. Along with a proven track record of successfully scoping, resourcing, and delivering complex cybersecurity projects.
• Leadership Skills: Proven ability to lead project teams, manage resources effectively, and mentor consultants to ensure collaborative and successful delivery.
• Client Relationship Management: Experience supporting client engagements, understanding needs, and providing technical guidance to align solutions with objectives.
• Strategic Thinker: Solid strategic thinking to analyze data protection landscapes, identify risks, and recommend proactive, technically sound solutions.
• Innovative Problem Solver: Strong ability to apply creative technical solutions to complex challenges, leveraging best practices in data governance, security controls, and compliance automation.
• Excellent Communication Skills: Effective verbal and written communication to explain technical Data Protection concepts with the ability to communicate complex technical concepts to non-technical stakeholders, including contributing to technical documentation and client presentations.
• Certifications: Relevant certifications such as CISSP (Certified Information Systems Security Professional), CIPP/C (Certified Information Privacy Professional/Canada), CDPSE (Certified Data Privacy Solutions Engineer), or other industry-recognized credentials in data protection would be highly desirable.

What We Look For

We’re interested in intellectually curious people with a genuine passion for cybersecurity. If you have the confidence in your technical abilities to grow into a leading expert here, this is the role for you.

This job posting relates to an existing vacancy within our organization.

What We Offer

At EY, our Total Rewards package supports our commitment to creating a leading people culture - built on high-performance teaming - where everyone can achieve their potential and contribute to building a better working world for our people, our clients and our communities. It's one of the many reasons we repeatedly win awards for being a great place to work.

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a comprehensive medical, prescription drug and dental coverage, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

• Support and coaching from some of the most engaging colleagues in the industry
• Learning opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.

Inclusiveness at EY

Inclusiveness is the heart of who we are and how we work. We’re committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting ourneuroinclusionand accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with the highest ethical principles and regulatory requirements.

To all recruitment agencies: EY does not accept unsolicited resumes from recruitment agencies. Any resumes submitted without a prior agreement or request from our hiring team will not be considered. EY is not responsible for any fees related to unsolicited resumes.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.