Data Stewardship - Risk and Controls Senior Associate

EY; Wrocław; Hybrid; PLN 120,000 - 190,000; Full time

Job summary

EY GDS Poland is seeking a Data Stewardship – Risk and Controls Senior Associate to join our centralized Data Risk Exceptions team in Wrocław/Katowice. The role focuses on managing data transfer exception requests, ensuring alignment with EY policies, and supporting business needs with controlled, compliant processes.

You will review, triage, and process requests, coordinate with Information Security, control owners and risk leaders, and contribute to standardization and reporting efforts across

Qualifications

• Fluent in English (C1)
• 4+ years of related work experience
• Experience in Risk Management Services
• Experience in Data Risk / Information Security / Data Exfiltration
• Experience in Compliance or operational governance processes
• Experience with structured processes, workflows or case management systems
• Ability to analyze information and support risk-based decision-making
• Experience engaging with senior stakeholders

Responsibilities

• Act as part of a centralized team responsible for intake, triage and processing of data transfer exception requests across multiple controls and regions
• Perform initial review of exception requests, ensuring completeness, appropriate business justification, and required approvals
• Conduct risk-based assessment of requests, identifying potential data protection, confidentiality and insider threat risks
• Provide clear recommendations and summaries to support decision-making by control owners and approvers
• Coordinate across multiple stakeholders including Engagement teams, Information Security teams, Control owners, Data Risk Leaders / Risk Management Leaders
• Track requests through their lifecycle, ensuring timely processing and adherence to defined SLAs
• Maintain accurate documentation of requests, decisions, and conditions applied
• Support development of centralized reporting and dashboards, identifying trends, recurring risks and improvement opportunities
• Contribute to process standardization and documentation (playbooks, SOPs, guidance materials)
• Provide guidance to requestors on secure alternatives and compliant data transfer practices

Skills

Data protection

Risk-based thinking

Attention to detail

Communication

Stakeholder management

Prioritization

Proactive mindset

Education

IAPP certifications (CIPP/E, CIPP/US, CIPM)

Job description

Data Stewardship – Risk and Controls Senior Associate

Location: Wrocław / Katowice - 2 days in office / 3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

We are looking for a Senior Associate to be part of a new set up of Data Risk Exceptions process for data transfer controls.

If you want to shape a high‑impact service enabling EY Member Firms and Regions to manage data risk exceptions at scale, this opportunity is for you.

The opportunity

You will be part of the GDS RMS Data Risk Exceptions team responsible for operating a centralized Data Risk Exceptions Management process. This role supports EY Member Firms and Regions across EMEIA by providing a consistent and standardized approach for managing exception requests related to data transfer restrictions and controls.

The role contributes to protecting EY and client data by ensuring that all exception requests are reviewed, triaged, and processed in line with EY policies, while enabling business needs to be met in a controlled and compliant manner.

Your Key Responsibilities

• Act as part of a centralized team responsible for intake, triage and processing of data transfer exception requests across multiple controls and regions
• Perform initial review of exception requests, ensuring completeness, appropriate business justification, and required approvals
• Conduct risk‑based assessment of requests, identifying potential data protection, confidentiality and insider threat risks
• Provide clear recommendations and summaries to support decision‑making by control owners and approvers

Coordinate across multiple stakeholders, including:

• Engagement teams
• Information Security teams
• Control owners
• Data Risk Leaders / Risk Management Leaders
• Track requests through their lifecycle, ensuring timely processing and adherence to defined SLAs
• Maintain accurate documentation of requests, decisions, and conditions applied
• Support development of centralized reporting and dashboards, identifying trends, recurring risks and improvement opportunities
• Contribute to process standardization and documentation (playbooks, SOPs, guidance materials)
• Provide guidance to requestors on secure alternatives and compliant data transfer practices

Skills And Attributes For Success

• Strong understanding of data protection, confidentiality and information security principles
• Ability to apply structured, risk‑based thinking in operational decision support
• High attention to detail and ability to manage process‑driven work with accuracy and consistency
• Strong communication and stakeholder management skills in a global, cross‑functional environment
• Ability to prioritize and manage multiple requests across tools and processes
• A proactive mindset with focus on continuous improvement and standardization

Good knowledge of :

• Data transfer channels
• Data exfiltration controls
• EY Acceptable Use of Technology Policy and relevant InfoSec guidance
• Data risk mitigation / remediation

To qualify for the role, you must have

• You should be fluent in English (C1)
• 4+ years of related work experience
• Relevant professional experience in:
• Risk Management Services
• Data Risk / Information Security / Data Exfiltration
• Compliance or operational governance processes
• Experience working with structured processes, workflows or case management systems
• Ability to analyze information and support risk‑based decision‑making
• Experience engaging with senior stakeholders demonstrating confidence in communication and presenting risk‑related topics

Ideally, you’ll also have

• IAPP certifications (either CIPP/E, CIPP/US and/or CIPM)

What We Look For

• A risk‑aware mindset, balancing business needs with data protection requirements
• Confidence in working within a new and evolving process environment
• Strong ownership and accountability for quality and outcomes
• Ability to collaborate effectively across geographies and seniority levels
• A continuous improvement mindset, contributing to shaping a scalable and sustainable global service

What We Offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow‑up actions. Any misconduct should be reported through the EY Ethics Hotline.