Data Risk & Protection Controls Lead – Regional

Jobtailor; Wrocław; On-site; PLN 180,000 - 250,000; Full time

Job summary

EY is seeking a senior risk management professional to lead the Data Risk Control program and drive adoption of data protection controls across regions. You will partner with Information Security, product owners, and regional leaders to ensure effective deployment and governance of controls.

The role requires 8+ years in Technology Risk Management, an advanced degree, and strong English communication. You will present metrics to leadership and support continuous program improvements.

Qualifications

• 8+ years in Technology Risk Management or related Information Security field.
• Advanced degree in Computer Science, Information Security or related discipline, or equivalent experience.
• Proficiency with ISO and COBIT policy frameworks.
• Strong English with excellent writing and communication skills.
• Proven ability to manage multiple projects in fast-paced environments.
• Skilled in executive-level presentations and briefings.
• Demonstrated leadership, negotiation, collaboration and influencing skills.
• Knowledge of EY Business and Service Line Risk Priorities.

Responsibilities

• Support execution and operational management of the Data Risk Control program, including the Dataguard program.
• Coordinate activities to prevent data exfiltration across regions and service lines.
• Coordinate implementation and operational management of data protection controls across EY.
• Engage with business stakeholders, Information Security teams, product owners, and regional leaders.
• Facilitate control deployment, address challenges, and support risk mitigation.
• Serve as primary point of contact for regional teams and stakeholders on deployment and adoption.
• Track implementation progress, remediation activities, risk mitigation plans, and milestones.
• Support stakeholder engagement, communications, education, and awareness efforts.
• Prepare program metrics, status reports, executive presentations, and governance materials.
• Coordinate testing, validation, and documentation of control implementations.
• Support continuous improvement to enhance program effectiveness and efficiency.

Skills

Technology Risk Management

Data Protection Controls

ISO Policy Framework

Executive-Level Presentations

CRISC Certification

Education

Advanced degree in Computer Science / Information Security

Tools

Policy frameworks (ISO, COBIT)

Job description

EY is seeking a senior risk management professional to lead the Data Risk Control program and drive adoption of data protection controls across regions. You will partner with Information Security, product owners, and regional leaders to ensure effective deployment and governance of controls.

The role requires 8+ years in Technology Risk Management, an advanced degree, and strong English communication. You will present metrics to leadership and support continuous program improvements.