Data Protection Manager

Ernst & Young Advisory Services Sdn Bhd; Katowice; Hybrid; PLN 260,000 - 470,000; Full time

Job summary

EY GDS Poland is seeking a Manager in the Cybersecurity Data Protection & Privacy practice to lead complex client engagements and grow the Data Protection capability across global clients. The role blends advisory delivery, people leadership and market development, with a focus on data protection strategies, governance frameworks and technology solutions.

You will mentor teams, shape propositions, contribute to proposals, and help EY GDS expand its Data Protection services while delivering

Qualifications

• 5+ years of relevant experience in data protection projects.
• Thorough understanding of protection concepts with advanced DLP knowledge.
• Knowledge of protection services: DLP, data classification, retention, lifecycle, CASB, DSPM.
• AI proficiency in professional context.
• Advanced English skills (C1 preferred).

Responsibilities

• Lead and deliver Data Protection engagements across industries and regions.
• Advise on Data Protection strategy, governance, operating models, and technology transformation initiatives.
• Design and implement solutions to identify, classify, protect, and manage sensitive data.
• Facilitate client workshops, requirement gathering, and executive discussions.
• Mentor teams and ensure high‑quality project delivery.

Skills

Data Protection

DLP knowledge

Governance & policy

InfoSec leadership

Stakeholder management

Education

Related Education (Cybersecurity/IT)

Tools

Microsoft Purview

Symantec

McAfee

Forcepoint

Netskope

Palo Alto

SkyHigh

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Location: Katowice - 2 days office / 3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

As a Manager within EY's Cybersecurity Data Protection & Privacy practice, you will lead complex client engagements while playing a key role in developing and expanding the EY GDS Data Protection capability. This is a dual-focus position that combines advisory and delivery responsibilities for global clients with leadership responsibilities for the growth and evolution of our Data Protection team.

You will work with organizations across industries and geographies to design and implement data protection strategies, governance frameworks and technology solutions. At the same time, you will contribute to building a high-performing Data Protection practice through capability development, people leadership, business development and market engagement.

We are seeking an experienced leader and cybersecurity consulting professional with strong expertise in Data Protection, a passion for developing growing teams and leading project engagements. The successful candidate will act as a trusted advisor to clients, support proposal activities, and help shape the future of Data Protection services within EY GDS Cybersecurity.

EY’s Cybersecurity Practice functions as a centre of excellence to assist our consulting practices in planning, pursuing, delivering and managing large, complex full lifecycle initiatives along with providing expertise in leading practices, methods, and resources in the space of Technology Consulting. The Data Protection & Privacy competency within the Cybersecurity practice is a critical competency that supports our clients across all industry sectors.

Your key responsibilities

As a Manager in the Data Protection & Privacy competency, you will help Clients define technical and business requirements for data protection solutions as well as develop business processes and policies related to data protection topics. This includes helping Clients to identify, understand and protect their most critical data throughout the data lifecycle.

Your responsibilities will include:

Client Delivery & Advisory:

• Lead and deliver Data Protection engagements for clients across various industries and regions.
• Advise clients on Data Protection strategy, governance, operating models, and technology transformation initiatives.
• Design and implement solutions that help organisations identify, classify, protect, and manage sensitive data throughout its lifecycle.
• Facilitate client workshops, requirement‑gathering sessions, and executive‑level discussions.
• Act as a trusted advisor to client stakeholders on Data Protection, Information Protection, Data Privacy, and regulatory compliance matters.
• Contribute to successful project delivery by providing subject matter expertise and ensuring high‑quality outcomes.

Business Development & Market Engagement:

• Support business growth through proposal development, solution design, effort estimation, and pursuit activities.
• Respond to Requests for Proposals (RFPs), Requests for Information (RFIs), and other business development opportunities.
• Build and maintain strong relationships with clients and internal stakeholders.
• Identify emerging client needs, market opportunities, and technology trends related to Data Protection and Privacy.
• Contribute to the development of service offerings, methodologies, accelerators, and thought leadership assets.

Capability Development & People Leadership:

• Drive the growth and maturity of the EY GDS Data Protection capability.
• Lead, coach, and mentor Data Protection early professionals, supporting their career development and technical growth.
• Manage team performance, engagement planning, resource allocation, and skill development initiatives.
• Foster a culture of collaboration, continuous learning, innovation, and knowledge sharing.
• Support recruitment, onboarding, and capability‑building activities aligned with business objectives.

Practice Management & Operational Excellence:

• Monitor utilisation, engagement pipeline, training progress, and other key performance indicators.
• Support workforce planning and team capacity management across ongoing and future engagements.
• Ensure effective communication with stakeholders regarding project progress, risks, dependencies, and expected outcomes.
• Identify and manage delivery risks and issues, working with engagement teams and leadership to ensure successful resolution.
• Stay current with evolving Data Protection technologies, industry standards, regulatory requirements, and cybersecurity trends.

Skills and attributes for success

We are looking for experienced managers ready to further develop their data compliance, protection technology and consulting skills across a variety of business processes, who can work independently, but also as a part of a team. The future Data Protection Consulting Manager will be participating in a cross‑functional initiatives and collaborating across various global and local domains. The role will require interacting with project managers and EY Partners from all over the world.

To qualify for the role, you must have

• 5+ years of relevant experience in data protection projects
• Thorough understanding of various protection concepts, advanced DLP knowledge is a must,
• General knowledge on all protection‑related services: DLP policy management, Data classification, Data retention, Data lifecycle management, DLP triaging, CASB, DSPM
• AI proficiency personally and at work
• Advanced English skills (C1 certification preferred)

Ideally, you’ll also have

• Related Education (Cybersecurity, DLP, IT) and Certificates (e.g., CISSP, CISM),
• Ability to design and implement effective protection program, introduce protection management process transformation and automation,
• Hands‑on experience with data privacy management tools, e. g. Microsoft Purview, Symantec, McAfee, Forcepoint, Netskope, Palo Alto, SkyHigh)
• Experience in leading data protection proposal/workshop sessions,
• Experience with data discovery, data mapping and data classification,
• Experience in responding to Data Protection Request for Proposals (RFPs),
• Passion for innovation, continuous learning, and staying current with emerging Data Protection, Privacy, AI, and cybersecurity trends.

What we look for

We are looking for a highly motivated and collaborative cybersecurity consulting professional who combines strong Data Protection expertise with passion for helping organizations address complex data security and privacy challenges, communicating effectively with both technical and business audiences. The ideal candidate is comfortable leading client engagements, building trusted stakeholder relationships, developing high‑performing teams, and contributing to the growth of a world‑class Data Protection practice.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well‑known brands from across the globe. We’ll introduce you to an ever‑expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture:You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long‑term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow‑up actions. Any misconduct should be reported through the EY Ethics Hotline.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.