Global Legal Counsel (Assistant Director) - AI

Ernst & Young Advisory Services Sdn Bhd; London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A global consulting firm in London seeks a qualified Global Legal Counsel – Data Protection to oversee AI governance for its systems and applications. This role involves advising on data protection laws, collaborating with various stakeholders, and ensuring compliance with EU regulations. Ideal candidates have significant legal experience and relevant certifications. Join us to shape a better working world.

Benefits

Flexible work environment

Diverse and inclusive culture

World-class development opportunities

Qualifications

• 5+ years of relevant legal experience in data protection or IT/IP law.
• Solid knowledge of EU data protection legislation.
• Proven experience in cross-border situations.

Responsibilities

• Oversee the governance of global data protection related to AI.
• Advise business stakeholders on compliance with data protection laws.
• Collaborate with local data protection teams across EY.

Skills

Legal expertise in GDPR

Knowledge of EU AI ACT

Good communication skills

Intercultural sensitivity

Education

Legally qualified with a current practicing certificate

Internationally recognized privacy certification (CIPP/E, CIPT, CIPM)

AI certification (AIGP)

Job description

Press Tab to Move to Skip to Content Link

Location: London

Other locations: Primary Location Only

Date: Jul 29, 2025

Requisition ID: 1630231

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Our global data protection team is seeking a qualified data protection lawyer to oversee the data protection governance process for the development, deployment, and use of EY’s global tools, systems and applications leveraging Artificial Intelligence (AI) technologies and advise our Service Lines, Business and Compliance functions on AI related data protection matters and the evolving legal and regulatory landscape associated to AI and other emerging technologies including the EU AI ACT as well as broader confidentiality and data protection risks.

This involves close collaboration with the other members of the global data protection team, the teams who are responsible for completing data protection impact assessments (“PIAs”) and ROPAs of EY’s global systems and applications and performing data protection vendor due diligence (“DP-VDD”) as well as the regional and local data protection teams of our Global network of EY Member Firms.

The global data protection team is responsible for the implementation and transformation of EY’s privacy compliance program, which include Binding Corporate Rules. The team works closely with all parts of the business on data protection matters, including both personal data privacy and the protection of client and EY confidential information.

Position summary:

As the Global Legal Counsel – Data Protection, you will be responsible for overseeing the data protection AI governance process for EY’s global systems and applications as well as providing legal advice to Business Stakeholders in our Service Lines, core business Functions and compliance teams regarding the requirement of implementation of responsible AI and broader confidentiality, artificial intelligence and data protection risks.

You will be working closely with business stakeholders, the other members of the global data protection team, and EY Regional/Local data protection leaders.

Essential functions of the job:

• You are a Legal expert in GDPR, EU AI ACT and other Data Protection and AI laws to oversee truly global data protection AI governance processes and procedures for the responsible deployment and use of AI in accordance with the rapidly evolving legal and regulatory landscape around Data Protection and AI;
• Work as Legal Advisor and AI point of contact for EY´s Global Service Lines (Tax, Assurance, Consulting and SaT) to help understand their development pipeline of new tools and support embedding data protection principles into the foundation of the design, development and use of AI in EY Tools, Systems and Processes in accordance with EY’s responsible AI framework;
• Support EY’s Data Protection and Information Security Training Program to empower EY professionals to use AI responsibly and in compliance with evolving laws, regulations and professional standards
• Communicate effectively and consistently with key stakeholders (EY Service Line personnel, Global IT, General Counsel’s Office, Risk Management, Talent, and Service Line representatives);
• Work with a team of legal resources globally throughout EY such as the Contracts Practice Group in reviewing third-party contracts and advise on data utilization practices in technology and AI projects;
• Collaborate closely with the local and regional Data Protection Team to foster the understanding of the Global Data Protection processes and procedures around AI and emerging technologies and support the local implementation of compliant AI Data Protection Assessment processes in accordance with EY’s Global Policy Framework;
• Raise awareness among EY personnel globally regarding the importance of compliance with data protection & AI regulations and EY’s own AI governance and responsible AI program;
• Monitor the evolving global landscape of AI laws and regulations to ensure internal practices and processes are aligned and compliant;
• Advise on complex AI projects and identify corresponding risk associated with the use of EY Information, and third-party data use practices including data-scraping and implement solutions to mitigate such risks;
• Escalate to the Chief Privacy Officer (CPO) any significant compliance issues and plans for their resolution, as well as implications of local regulations applicable throughout EY globally;
• Provide general support to the Global Data Protection Team.

Knowledge, competency and skill requirements:

• Must be legally qualified and holding a current practicing certificate;
• 5+ Years of relevant legal experience either in private legal practice or an in-house role (including proven experience in the field of data protection, IT & IP law or AI in cross border situations);
• Solid knowledge in EU data protection legislation (specifically the GDPR) and ideally familiarity with the legislation of one or more other jurisdictions;
• Solid knowledge of IT & IP Laws and regulations as well as a strong interest in the evolving landscape of AI laws and regulations including the EU AI ACT;
  internationally recognized privacy certification, such as CIPP/E, CIPT and CIPM. Preferably an AI certification such as AIGP;
• Excellent command of the English language;
• Sensitivity to intercultural contacts and communication.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

Are you ready to shape your future with confidence? Apply today.

To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.