GDS Data Protection Counsel

EY; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

EY GDS seeks a seasoned Assistant Director to lead Data Protection Incident Response within a global team. You will guide the Data Incident Delivery unit, advise on incident handling, and ensure compliance with local laws and EY policies.

The role blends strategic legal counsel with hands-on oversight of reporting, documentation, and escalation processes. You will collaborate with senior stakeholders across borders, oversee investigations where needed, and drive continuous improvement in the

Qualifications

• Law degree and a practising certificate in a GDS or GDPR jurisdiction.
• Strong academic background with analytical rigor.
• Recognised data protection qualification or willingness to obtain within six months.

Responsibilities

• Provide strategic legal advice on data incidents within the GDS Data Protection portfolio.
• Instruct, oversee and guide the Data Incident Delivery team.
• Manage reporting, maintain Data Incident Response docs, policies and escalation matrices.
• Ensure legal privilege is established and determine regulator/data subject reporting requirements.
• Oversee investigative steps and act as SME and escalation point.
• Collaborate with internal stakeholders including GDS Deputy Lead Counsel and Chief Privacy Officer.

Skills

Data Protection

Incident Response

GDPR Knowledge

Stakeholder Mgmt

Leadership

English Proficiency

Investigations

Cross-border Issues

Project Management

Legal Counsel

Education

Law Degree

Practising Certificate

Data Privacy Certification (CIPP/E or similar)

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Assistant Director – Global Delivery Services (GDS) Legal Counsel – Data Protection Incident Response

Function :GDS Legal team Sub Function : Data Protection Scope : Global

The opportunity

This is an exciting time to join the GDS Data Protection team as we scale our program to support the continued expansion of the business. You will build your professional knowledge and credentials, gain insight into how EY operates globally and work within a cross‑functional team of professionals to embed and continuously improve the GDS data protection program. The role will focus primarily on managing Data Protection Incident Response across GDS operating locations, including Argentina, Hungary, India, Mexico, the Philippines, Poland, Spain, Sri Lanka, the UK and other locations as GDS continues to expand. The role will form part of the Data Protection portfolio of the GDS General Counsel’s Office (GDS GCO).

Your key responsibilities

The Assistant Director supporting the GDS Data Protection portfolio, you will provide strategic legal advice relating to data incidents and will instruct, oversee and guide members of the Data Incident Delivery team. You will be responsible for management reporting, keeping Data Incident Response documentation up to date, including policies, protocols, RACIs and escalation matrices, in line with local laws and EY Global guidance. You will also ensure that legal professional privilege is established and maintained, prepare assessments and provide legal advice on whether matters are reportable to regulators and data subjects under local law requirements, and oversee any such reporting. In addition, you will provide legal approval and oversight for certain investigative steps and act as a subject matter expert and escalation point for complex or sensitive incidents. You will consult and collaborate effectively with key internal stakeholders, including, but not limited to, the Global Deputy Lead Counsel – Data Protection Incident Response and the GDS Chief Privacy Officer.

Skills and attributes for success

• Approximately 10 years’ post‑qualification experience, including at least five years’ professional experience in Data Protection Incident Response in a legal counsel capacity
• Strong understanding of data protection principles and the application of controls to protect confidential and personal data
• Strong knowledge of the GDPR and related data protection requirements
• Experience conducting internal investigations, particularly data breach response investigations, is preferred but not required
• Comfortable working in an unstructured and complex environment that requires creative thinking and sound logical reasoning
• Ability to continuously add value to assigned processes and develop practical, effective solutions
• Ability to learn and understand EY’s global policies, with familiarity with related Legal, Risk Management and Data Governance initiatives beyond the immediate area of expertise
• Ability to manage tasks and activities in a timely manner and take responsibility for specific outcomes
• Basic knowledge of project management tools and methodologies
• Ability to handle confidential and sensitive information appropriately
• Strong research and communication skills
• Ability to manage multiple tasks successfully and provide effective team leadership
• Interest in working with a culturally diverse global team to design, develop and deploy programmes and share knowledge
• Excellent relationship‑building and interpersonal skills, with an inclusive approach
• Effective communicator with strong written and oral presentation skills
• Team player and active listener, with the ability to respond to and develop the ideas of others
• Experience working in an international setting and resolving cross‑border issues
• Excellent command of the English language

To qualify for the role you must have

• Law degree and a practising certificate in a GDS jurisdiction or a GDPR jurisdiction
• Strong academic background
• A recognised data protection or data privacy qualification, such as CIPP/E or similar, or willingness to obtain one within the first six months with the team, would be preferred

Ideally, you’ll also have

• Ability to operate effectively and flex in an ambiguous and changing environment to respond to emerging priorities
• Experience working to deadlines and delivering high‑quality outputs across multiple jurisdictions in addition to India.
• Ability and willingness to work flexibly from time to time, including participating in calls outside standard office hours, to support a global organisation
• Proven track record of independently managing multiple stakeholders in a structured multinational organisation

What we look for

We’re looking for an experienced, high‑energy individual who embraces change and innovation and can help us continue to deliver world‑class initiatives in an ever‑changing environment.

What we offer

EY GDS is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, Mexico, the Philippines, Poland, Spain, Sri Lanka and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in delivering EY’s growth strategy. From accountants and coders to advisory consultants, we offer a wide variety of fulfilling career opportunities across business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well‑known brands from around the world. We’ll introduce you to an ever‑expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world

EY exists to build a better working world, helping to create long‑term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.