Supervising Associate, Privacy and Data Protection (12-month contract)

EY; Toronto; On-site; CAD 77,000 - 116,000; Full time

Job summary

EY Canada in Toronto is seeking a Supervising Associate to join the Privacy and Data Protection team on a 12-month contract. You will contribute to the firm's privacy program by supporting policies, processes and guidance to maintain compliance with applicable laws and regulatory requirements.

You will work with EY service lines and stakeholders to advance the privacy program, assist with data protection activities such as DPIAs and incident management, and help train teams on risk practices in

Qualifications

• Minimum of three years in privacy or data protection.
• Knowledge of Canadian privacy laws incl. Bill C-27 and Law 25.
• Familiarity with data architecture concepts and cloud storage.
• Experience interpreting policies and providing guidance.

Responsibilities

• Support compliance with EY privacy policies.
• Assist with data protection activities and DPIAs, data incident management.
• Provide risk-appropriate advice to EY professionals.
• Support training and awareness campaigns.

Skills

Privacy and data protection

Regulatory knowledge

Risk management

Policy interpretation

Project management

Client service

Stakeholder collaboration

Job description

Supervising Associate, Privacy and Data Protection (12-month contract)

Location: Toronto

Other locations: Primary Location Only

Date: Oct 22, 2026

Requisition ID: 1755379

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The Opportunity

The risks in today’s disruptive environment are increasingly multifaceted and evolve faster than ever before. We’re continuously evolving the ways we proactively manage risk to address the risk environment of tomorrow. EY Canada’s Risk Management (RM) function is responsible for the management of a variety of risks associated with regulation, data protection, records and information management, client and engagement acceptance, conflicts, and independence.

Our highly engaged team is looking to hire a privacy professional to join our privacy and data protection team. As an integral part of this team, this individual will be directly involved with policies, processes and procedures to maintain the Firm’s compliance with applicable privacy laws and related policies and guidance. This individual will also serve as a role model by promoting and demonstrating commitment to risk management processes and policies within the Firm.

This job posting relates to an existing vacancy within our organization.

Key responsibilities

• Support and promote compliance with EY policies and processes related to privacy and data protection
• Support with data protection activities, such as data incident management, privacy impact assessments, records of processing activities, data loss prevention, client questionnaires, and responding to RFPs
• Individual will be required to understand and interpret relevant policies and guidance and to consistently provide risk-appropriate advice to EY professionals
• Provide direct support to EY Canada’s Privacy and Data Protection Leader and the team
• Work with EY service lines and functions, other EY member firms, EY Global, and local stakeholders to advance the privacy and data protection program.
• Support training and awareness campaigns.

Skills and attributes for success:

• Strong analytical and problem-solving skills, with the ability to exercise sound judgment when assessing privacy and data protection risks.
• Ability to understand and interpret policies, regulatory requirements and guidance, and provide practical, risk-appropriate advice to stakeholders.
• Strong organizational and time-management skills, with the ability to manage multiple priorities and changing deadlines while maintaining accuracy and attention to detail.
• Excellent written and verbal communication skills, with a strong client-service mindset.
• Strong interpersonal and collaboration skills, with the ability to work effectively with multidisciplinary teams and stakeholders across the organization.
• Ability to work effectively in a fast-paced, deadline-driven environment while handling sensitive and confidential information.
• Adaptability and flexibility to respond to an evolving privacy and regulatory landscape.

To qualify for the role, you must have

• A minimum of three years of experience in a privacy or data protection function, including hands-on experience with activities such as privacy impact assessments, records of processing activities and privacy incident management.
• Knowledge of Canadian federal and provincial privacy laws and regulatory requirements including Bill C-27 and Law 25 in Quebec. Knowledge of CASL, GDPR and California privacy requirements would be considered an asset.
• Familiarity with technology and data architecture concepts relevant to privacy and data protection, including databases, cloud storage and data flows.
• Knowledge and understanding of risk management and compliance principles, with experience interpreting policies and providing related guidance.
• Project management experience or demonstrated experience managing privacy, compliance or risk-related initiatives.
• Understanding of client service and the ability to work effectively with business stakeholders.
• Knowledge of, or experience working within, a multidisciplinary professional services environment would be an asset.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. Plus, we offer:

• Support and coaching from some of the most engaging colleagues in the industry
• Learning opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.

• Toronto: $77,200 to $115,800

Inclusiveness at EY

Inclusivenessisat the heart of who we are and how we work.We’recommitted to fostering an environment where differences are valued, policies and practices areequitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting ourneuroinclusionand accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with ethical principles and regulatory requirements.

To all recruitment agencies: EY does not accept unsolicited resumes from recruitment agencies. Any resumes submitted without a prior agreement or request from our hiring team will not be considered. EY is not responsible for any fees related to unsolicited resumes.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.