Assistant Director - Data Protection & Privacy

EY; Dadri; On-site; INR 3,000,000 - 5,500,000; Full time

Job summary

EY seeks an Associate Director to lead the Data Protection & Privacy practice, spanning advisory, implementation and operate services, with market-facing credibility and a track record of scaling high-growth cyber capabilities across data protection, privacy, AI data risk and related technology.

The role emphasizes client leadership, governance, delivery excellence and development of reusable assets, with senior stakeholder engagement and a strategic, commercial mindset.

Qualifications

• 14+ years of experience in cyber security, data protection, privacy, data security, privacy engineering, cloud security, GRC or technology consulting.
• Proven experience leading large client programmes, practices, portfolios or globally distributed delivery teams.
• Strong understanding of data protection and privacy domains including DLP, CASB, DSPM, data discovery, classification, data governance, encryption, RoPA, DSR, consent and privacy controls.
• Experience with Microsoft Purview, privacy technologies, data security platforms, cloud ecosystems or managed services.
• Strong appreciation of AI-era data risks, including AI governance, AI-ready data labelling, DSPM for AI, AI DLP, secure AI adoption and emerging regulatory expectations.
• Executive presence, commercial orientation, structured communication and the ability to influence senior internal and client stakeholders.
• Relevant certifications such as CIPP, CIPM, CIPT, CISSP, CISM, CISA, ISO 27001, cloud security or Microsoft Purview-related credentials are preferred.

Responsibilities

• Lead the growth strategy for the Data Protection & Privacy practice across advisory, implementation and operate services.
• Build market-facing propositions across AI Data Risk Governance, DSPM and Purview for AI, Privacy Protection & Operate, PQC/Crypto Agility and sector-specific data risk solutions.
• Partner with client teams, sector leaders, alliance partners and senior stakeholders to shape pursuits, solution themes and delivery models.
• Oversee complex client engagements across privacy, data protection, DLP/CASB/DSPM, Purview, PKI, encryption, RoPA, DSR, consent, DPIA and privacy controls.
• Drive development of reusable assets, accelerators, demo environments, reference architectures and delivery playbooks.
• Build and mentor high-performing teams across privacy, data protection engineering, Microsoft Purview, PKI, DSPM and AI-enabled data protection.
• Strengthen practice quality, delivery governance, solution consistency and measurable client outcomes.

Skills

Cyber security

Data protection

Privacy engineering

Cloud security

GRC

Executive presence

Stakeholder management

AI governance

Data governance

Education

CIPP

CIPM

CIPT

CISSP

CISM

CISA

ISO 27001

Purview credentials

Tools

Microsoft Purview

Job description

The Opportunity

We are seeking an experienced Associate Director to lead our Data Protection & Privacy practice. This is a senior leadership role for a market-facing, technically credible and commercially minded professional who can scale a high-growth cyber capability across data protection, privacy, AI data risk, Microsoft Purview, DSPM, DLP/CASB, PKI, privacy operations and managed services.

The successful candidate will help shape the next chapter of the practice as a Data Risk & AI Protection growth engine, supporting clients as they govern, protect, monitor and evidence control over sensitive data across AI, cloud, regulatory and emerging technology environments.

Your Key Responsibilities

• Lead the growth strategy for the Data Protection & Privacy practice across advisory, implementation and operate services.
• Build market-facing propositions across AI Data Risk Governance, DSPM and Purview for AI, Privacy Protection & Operate, PQC/Crypto Agility and sector-specific data risk solutions.
• Partner with client teams, sector leaders, alliance partners and senior stakeholders to shape pursuits, solution themes and delivery models.
• Oversee complex client engagements across privacy, data protection, DLP/CASB/DSPM, Purview, PKI, encryption, RoPA, DSR, consent, DPIA and privacy controls.
• Drive development of reusable assets, accelerators, demo environments, reference architectures and delivery playbooks.
• Build and mentor high-performing teams across privacy, data protection engineering, Microsoft Purview, PKI, DSPM and AI-enabled data protection.
• Strengthen practice quality, delivery governance, solution consistency and measurable client outcomes.

Skills and attributes for success

• 14+ years of experience in cyber security, data protection, privacy, data security, privacy engineering, cloud security, GRC or technology consulting.
• Proven experience leading large client programmes, practices, portfolios or globally distributed delivery teams.
• Strong understanding of data protection and privacy domains including DLP, CASB, DSPM, data discovery, classification, data governance, lineage, encryption, PKI, RoPA, DSR, consent and privacy controls.
• Experience with Microsoft Purview, privacy technologies, data security platforms, cloud ecosystems or managed services.
• Strong appreciation of AI-era data risks, including AI governance, AI-ready data labelling, DSPM for AI, AI DLP, secure AI adoption and emerging regulatory expectations.
• Executive presence, commercial orientation, structured communication and the ability to influence senior internal and client stakeholders.
• Relevant certifications such as CIPP, CIPM, CIPT, CISSP, CISM, CISA, ISO 27001, cloud security or Microsoft Purview-related credentials are preferred.