EY - Cyber Security - Data Protection and Privacy Platforms Engineering - Manager

Ernst & Young Advisory Services Sdn Bhd; Ernakulam; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

EY is seeking a Manager in Cyber Security focusing on Data Protection and Privacy Platforms Engineering. You will design, implement, and operate enterprise data protection technologies across endpoints, networks, cloud, and AI environments.

You will lead client engagements, optimize DLP, data discovery/classification, and privacy tooling, and mentor junior engineers while collaborating with legal, privacy officers, and cloud teams.

Qualifications

• 10–14 years of information security experience with focus on data protection or privacy engineering.
• Hands-on with implementing and administering DLP across endpoints, cloud, and network.
• Experience with data discovery, classification, and privacy workflows (DSR/DSAR).
• Familiarity with privacy controls (encryption, tokenization, masking) and PKI.
• Hybrid/cloud work experience and ability to work with clients.

Responsibilities

• Lead design, implementation, and engineering of enterprise data protection and privacy platforms (DLP, discovery, classification).
• Implement and administer DLP solutions across endpoint, email, network, cloud, and SaaS.
• Design programs for data discovery, classification, and governance.
• Engineer privacy platforms supporting consent, DSAR/DSR, and privacy workflows.
• Enable PETs such as tokenization, anonymization, encryption, and masking.
• Integrate platforms with cloud, data, and AI ecosystems; manage labeling and policy enforcement.
• Develop runbooks and documentation; mentor junior engineers and consultants.
• Collaborate with clients and internal teams to translate privacy requirements into technical solutions.

Skills

Data protection

Privacy engineering

DLP

Privacy platforms

Cloud & AI security

Troubleshooting

Client engagement

Education

CIPP/E

CIPM

CISSP

Tools

Microsoft Purview

Job description

EY - Cyber Security - Data Protection and Privacy Platforms Engineering - Manager

EY – Cyber Security Manager – Data Protection and Privacy Platforms Engineering

The Opportunity

We’re looking for a Manager in our Cyber Security team with a strong focus on Data Protection and Privacy Platforms Engineering. This role is centered on the implementation, engineering, integration, and administration of enterprise scale data protection and privacy technologies, helping organizations protect sensitive data across endpoints, networks, cloud, applications, and AI enabled platforms.

You will work closely with clients to design and operationalize Data Loss Prevention (DLP), data discovery and classification, privacy management platforms, and privacy enhancing technologies (PETs)—enabling compliant, secure, and trusted use of data in modern digital and AI driven environments.

Your Key Responsibilities

• Lead the design, implementation, and engineering of enterprise data protection and privacy platforms, including DLP, data discovery, classification, and privacy tooling.
• Implement and administer Data Loss Prevention (DLP) solutions across endpoint, email, network, cloud, and SaaS environments.
• Design and operationalize data discovery and data classification programs, enabling visibility into sensitive data across structured and unstructured sources.
• Engineer and integrate privacy platforms supporting consent management, data subject rights (DSR/DSAR), records of processing, and privacy workflows.
• Implement and support Privacy Enhancing Technologies (PETs) such as tokenization, pseudonymization, anonymization, encryption, and data masking.
• Integrate data protection and privacy platforms with cloud, data, and AI ecosystems, including data lakes, analytics platforms, and AI/ML pipelines.
• Manage Microsoft Purview Information Protection (Labeling) for data classification, sensitivity labeling, and policy enforcement
• Configure and manage policy driven controls aligned with regulatory requirements (e.g., GDPR, regional privacy laws) and organizational data governance standards.
• Conduct platform configuration reviews, tuning, and optimization to improve effectiveness and reduce false positives.
• Support incident response and investigations related to data leakage, privacy breaches, and policy violations.
• Collaborate with security architecture, cloud, data, legal, and compliance teams to ensure end to end data protection.
• Develop operational runbooks, technical documentation, and standard operating procedures for privacy and data protection platforms.
• Mentor and guide junior engineers and consultants, fostering strong engineering and operational discipline.
• Engage with client stakeholders to translate privacy and data protection requirements into practical, implementable technical solutions.

Skills and Attributes for Success

• Strong hands on experience in data protection and privacy platforms engineering.
• Deep understanding of data discovery, data classification, and data lifecycle controls.
• Strong knowledge of DLP architectures and policy design across endpoint, cloud, and SaaS.
• Experience implementing privacy enhancing technologies (PETs) and data security controls.
• Ability to work across cloud, data, and AI environments, supporting secure data usage.
• Strong troubleshooting and problem solving skills in complex, enterprise environments.
• Ability to communicate effectively with technical teams, privacy officers, and business stakeholders.
• Consulting mindset with the ability to manage multiple client engagements and priorities.

To Qualify for the Role, You Must Have

• 10–14 years of experience in Information Security, with strong focus on Data Protection, Privacy Engineering, or Platform Implementation.
• Hands on experience implementing and administering DLP solutions (endpoint, email, cloud, network).
• Experience with data discovery and classification technologies across structured and unstructured data.
• Practical experience with privacy platforms supporting DSAR/DSR, consent, and privacy workflows.
• Strong understanding of data protection controls such as encryption, key management, tokenization, and masking.
• Experience working in hybrid and cloud environments.
• Relevant certifications such as CIPP/E, CIPM, CISSP, or equivalent are an advantage.

Ideally, You’ll Also Have

• Experience working in a consulting or professional services environment.
• Exposure to AI and analytics platforms, with focus on protecting sensitive training and inference data.
• Familiarity with global privacy regulations and how they translate into technical controls.
• Experience integrating privacy and data protection platforms with SIEM/SOAR or SOC processes.
• Strong interpersonal skills and the ability to build trusted client relationships.
• A proactive, hands on approach to solving complex data protection challenges.

What We Look For

• Professionals with a strong engineering and implementation mindset, not just advisory knowledge.
• Ability to lead data protection and privacy platform delivery for complex enterprise clients.
• Comfort engaging with CISOs, DPOs, Legal, Data, and Cloud teams.
• Experience in RFP responses, solution design, effort estimation, and go to market activities is a plus.
• Passion for enabling secure, compliant, and trusted use of data in modern digital and AI driven organizations.