Data Protection Incident Response - Assistant Director

EY; Wrocław; Hybrid; PLN 180,000 - 320,000; Full time

Job summary

EY GDS Poland seeks an experienced data privacy lawyer to lead incident response across multiple jurisdictions. The role supports the Global Lead Counsel - Data Incident Response and collaborates with Global Data Protection teams to coordinate global responses.

Key responsibilities include guiding on regulatory matters, maintaining incident tracking and metrics, and driving continuous improvement of EY’s data incident framework. Strong English communication is essential.

Qualifications

• Must be a qualified lawyer with strong academic record.
• Mandatory CIPP(E) certification; CIPM/CIPT are a plus.
• Experience handling cross-border data incidents and regulatory issues.

Responsibilities

• Provide legal oversight on global data protection incidents ensuring compliance with EY policies and laws.
• Coordinate with Information Security, Risk Management and GC teams across jurisdictions.
• Develop and oversee data incident tracking, reporting, metrics and trends.
• Support the global data incident response framework, policies and governance.
• Communicate requirements and guidance on cross-border data incidents.

Skills

Data privacy

GDPR knowledge

Stakeholder management

Leadership

English proficiency

Regulatory risk

Education

Qualified lawyer

CIPP(E) certification

Job description

Location: Wrocław/Katowice, 2 days office/3 days remote

Data Protection Incident Response - Assistant Director

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

This is a fantastic opportunity to be part of a leading firm whilst playing an instrumental role in advising on data privacy related matters. We are looking for an experienced lawyer with expertise in the data privacy domain to join EY’s Global Delivery Services (GDS) team supporting the General Counsel’s Office (GCO).

The successful candidate will work closely with the Global Lead Counsel - Data Incident Response (a Director in Global Data Protection responsible for the Global Incident Response program) to support the maintenance, coordination and continuous improvement of the Global Incident Response (IR) Program in collaboration with key stakeholders and data protection teams around the world.

The role will also play a key part in supporting the management of multijurisdictional incident responses.

You will work closely with business and Information Security stakeholders and Data Protection leadership and team members.

Your Key Responsibilities

• Provide legal oversight and guidance on the management of global data protection and privacy incidents ensuring compliance with EY policies, applicable laws, and regulatory requirements.
• Support the Global Deputy Lead Counsel - Data Protection Incident Response and the Chief Privacy Officer in the management of complex and strategically significant data incidents.
• Coordinate with Information Security, Risk Management, General Counsel teams, and other key stakeholders to ensure data incidents are managed consistently and effectively across jurisdictions.
• Develop and maintain oversight of data incident tracking, reporting, metrics, and trend analysis to support risk management and executive reporting across the EY organisation.
• Support the implementation and continuous improvement of EY’s global data incident response framework, policies, procedures, and governance processes.
• Communicate the global data incident response programme and related requirements, providing guidance and support on the management of cross-border data incidents
• Identify, assess, and escalation significant legal and regulatory issues arising from data incidents, including matters involving complex jurisdictional considerations or emerging regulatory developments.
• Collaborate with various stakeholders, including data protection, risk management, Infosec and General Counsel teams globally to ensure a coordinated response to incidents.
• Contribute to the development and delivery of training, awareness initiatives, and guidance materials to strengthen understanding of data protection obligations and data incident response requirements across EY.
• Oversee onboarding, capability building, and career development initiatives within the team.
• Allocate work, manage utilization, and ensure delivery aligned with SLAs, quality measures, and stakeholder expectations.
• Provide coaching, performance feedback, and development support to team members.
• Stakeholder management and assistance in business development initiatives.

Skills And Attributes For Success

• Demonstrated experience managing complex, cross-border data incidents and advising senior stakeholders on legal, regulatory, and risk considerations.
• Strong knowledge of EU and international data protection laws, particularly the GDPR, with familiarity with privacy legislation in other key jurisdictions considered advantageous.
• Experience interpreting and applying legal requirements relating to personal data breaches, regulatory investigations, law enforcement requests, and crisis management scenarios.
• Excellent legal judgement, analytical skills, and the ability to provide practical, risk-based advice in high-pressure situations.
• Strong stakeholder management and communication skills.
• Experience working in a complex global organisation and managing matters across multiple jurisdictions and cultures.
• Excellent written and verbal communication skills in English.
• Have a good understanding of emerging technologies such as cloud computing, RPA, AI etc.
• Experiences in client handling and leading a team of legal professionals.
• Ability to team effectively with onshore legal team and colleagues in other functions.
• Highly responsive with ability to manage high workload volumes efficiently and effectively
• Solution oriented with focus on exceptional client service.
• Confidence, maturity and high degree of awareness to be able to work effectively with a broad base of senior-level internal stakeholders.
• Sensitivity to intercultural contacts and communication.
• Strong sense of personal responsibility and ownership for success of a given task.
• Eagerness to contribute to a team-oriented environment and ability to work cooperatively with other teams and country practices, demonstrating cultural sensitivity;
• Ability to adapt, cross-skill, up-skill and work towards continuous improvements to improve efficiencies and processes within the team.

To qualify for the role, you must have

Qualifications

• Must be a qualified lawyer with consistent strong academic record.
• Mandatory a CIPP (E) certified. Other recognised privacy certifications (e.g., CIPM, CIPT) will be considered an advantage.

Experience

• Minimum 8 years of years of relevant post-qualification experience (preferably in a multi-national corporate).

Other Personal Characteristics

• Unquestioned ethics and integrity.
• High level of self-confidence and energy.
• High level of intellectual agility, self-motivation, resourcefulness, and patience.
• Attention to detail.

What Working At EY Offers

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across ten countries – Argentina, India, China, Philippines, Poland, Mexico, Spain, UK, Hungary, Sri Lanka – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.