Senior Cyber Security Consultant

EY; New Delhi; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

EY is seeking a Senior Consultant for National-Tech Consulting-CNS in Cyber Security, based in New Delhi. The role focuses on delivering privacy, data protection, and data governance engagements across industries.

You will advise on GDPR, DPDP Act, CCPA, and other regional regulations, conduct DPIAs/PIAs, and help clients operationalize privacy programs within technology platforms and processes. The engagement requires strong regulatory knowledge and consulting delivery experience in data

Qualifications

• Bachelor's Information Technology, Computer Science, or degree in Law or related field.
• Masters degree preferred (e.g., M. TECH, LLM, MBA in Information Security).

Responsibilities

• Deliver privacy, data protection, and data governance engagements.
• Advise on global/regional privacy regulations (GDPR, DPDP Act, CCPA) and business strategy.
• Lead end-to-end delivery of privacy engagements including assessments, design, implementation, and remediation.
• Perform DPIAs, PIAs, LIAs and advise on cross-border data transfer mechanisms.
• Design privacy frameworks, policies, and data subject rights processes.
• Guide privacy governance structures and operate privacy offices/committees.

Skills

Data privacy

Cybersecurity

Collaboration

Education

Bachelor's in IT/CS/Law

Masters degree preferred

Job description

Job Summary

The opportunity: Senior Consultant-National-Tech Consulting-CNS - TC - Cyber Security - New Delhi.

National comprises of sector agnostic teams working across industries for a well rounded experience.

CNS - TC - Cyber Security:

EY Consulting is transforming businesses through the power of people, technology and innovation. Our client-centric approach focuses on driving long-term value for our clients by solving their most strategic problems. EY Consulting is made up of three sub-service lines: Business Consulting (including Performance Improvement and Risk Consulting), Technology Consulting and People Advisory Services.

Responsibilities

• Responsible for delivering privacy, data protection, and data governance engagements.


• The role combines deep regulatory knowledge with practical consulting execution, helping clients design, implement, assess, and operationalize privacy programs aligned with global regulations (e.g., GDPR, DPDP Act, CCPA) and business strategy.


• Engagement Delivery Lead end-to-end delivery of data privacy and data protection consulting engagements, including assessments, program design, implementation, and remediation.


• Advise clients on global and regional privacy regulations, including: GDPR, UK GDPR, Digital Personal Data Protection Act (DPDPA), CCPA/CPRA; Other sector-specific or cross-border data protection requirements.


• Conduct privacy maturity assessments, gap analyses, and risk assessments.


• Design and operationalize: Privacy frameworks and target operating models; Policies, standards, procedures, and playbooks; Consent management, data subject rights (DSR) processes, and breach response workflows; Support clients with privacy by design/default integration into business processes, technology platforms, and product development.


• Risk, Compliance & Governance - Perform and review Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs) and Legitimate Interest Assessments (LIAs). Advise on cross-border data transfer mechanisms (SCCs, BCRs, adequacy, localization requirements). Support the establishment or enhancement of privacy governance structures, including: Privacy offices and operating committees; Data ownership and accountability models.


• Technology & Data Enablement - Strong experience in PMT/PET implementation. Integrate privacy controls into data platforms, cloud environments, and enterprise systems. Assess and advise on privacy tooling (data discovery, consent, DSR orchestration, risk management tools). Translate legal and regulatory requirements into practical technology and process controls.


• Thought Leadership - Contribute to proposal development, RFP responses. Develop and deliver client presentations. Stay current with evolving privacy laws, enforcement trends, and market practices, translating insights into consulting offerings.


• Professional Experience - 4-5 years of relevant experience in: Consulting, or professional services. Proven experience managing multiple client engagements simultaneously. Hands‑on experience delivering practical, implementable privacy solutions (not purely theoretical or legal).


• Certifications (preferred) - CIPP/E, CIPP/A, CIPM, or CIPT; ISO 27701 Lead Implementer/Auditor.

Skills and qualifications

To qualify for the role you must have

• Bachelors Information Technology, Computer Science, degree in Law or related field


• Masters degree preferred (e.g., M. TECH, LLM, MBA in Information Security)

Experience

• Data Privacy and Cybersecurity (4+ years)

What we look for

People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.