Data Stewardship - Risk and Controls Supervising Associate

EY; Katowice; On-site; PLN 150,000 - 230,000; Full time

Job summary

EY GDS Poland seeks a Data Stewardship – Risk and Controls Supervising Associate to join a centralized Data Risk Exceptions team. You will handle intake, triage and processing of data transfer exception requests across multiple controls and regions.

The role supports EY Member Firms and Regions by applying risk-based thinking, documenting decisions in line with EY policies, and enabling business needs to be met in a controlled, compliant manner.

Qualifications

• Fluent English and demonstrated ability to apply risk-based thinking to data risk decisions.
• Experience in data protection, confidentiality and information security practices.
• Track record of working with cross-functional teams on risk decisions.

Responsibilities

• Act as part of a centralized team for intake, triage and processing of data transfer exception requests across controls and regions.
• Perform initial review of requests, ensuring completeness, business justification and required approvals.
• Conduct risk-based assessments, identifying data protection, confidentiality and insider threat risks.
• Provide clear recommendations to support decision-making by control owners and approvers.

Skills

Data risk management

Information security

Stakeholder management

Risk assessment

Process improvement

Tools

Case management systems

Job description

Data Stewardship – Risk and Controls Supervising Associate

Location: Wrocław / Katowice - 2 days in office / 3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

We are looking for Senior Associate to be part of a new set up of Data Risk Exceptions process for data transfer controls.

If you want to shape a high‑impact service enabling EY Member Firms and Regions to manage data risk exceptions at scale, this opportunity is for you.

The opportunity

You will be part of the GDS RMS Data Risk Exceptions team responsible for operating a centralized Data Risk Exceptions Management process. This role supports EY Member Firms and Regions across EMEIA by providing a consistent and standardized approach for managing exception requests related to data transfer restrictions and controls.

The role contributes to protecting EY and client data by ensuring that all exception requests are reviewed, triaged, and processed in line with EY policies, while enabling business needs to be met in a controlled and compliant manner.

Your Key Responsibilities

• Act as part of a centralized team responsible for intake, triage and processing of data transfer exception requests across multiple controls and regions
• Perform initial review of exception requests, ensuring completeness, appropriate business justification, and required approvals
• Conduct risk‑based assessment of requests, identifying potential data protection, confidentiality and insider threat risks
• Provide clear recommendations and summaries to support decision‑making by control owners and approvers

Coordinate across multiple stakeholders, including:

• Engagement teams
• Information Security teams
• Control owners
• Data Risk Leaders/ Risk Management Leaders
• Track requests through their lifecycle, ensuring timely processing and adherence to defined SLAs
• Maintain accurate documentation of requests, decisions, and conditions applied
• Support development of centralized reporting and dashboards, identifying trends, recurring risks and improvement opportunities
• Contribute to process standardization and documentation (playbooks, SOPs, guidance materials)
• Provide guidance to requestors on secure alternatives and compliant data transfer practices

Skills And Attributes For Success

• Strong understanding of data protection, confidentiality and information security principles
• Ability to apply structured, risk‑based thinking in operational decision support
• High attention to detail and ability to manage process‑driven work with accuracy and consistency
• Strong communication and stakeholder management skills in a global, cross‑functional environment
• Ability to prioritize and manage multiple requests across tools and processes
• A proactive mindset with focus on continuous improvement and standardization

Good knowledge of

• Data transfer channels
• Data exfiltration controls
• EY Acceptable Use of Technology Policy and relevant InfoSec guidance
• Data risk mitigation/remediation

To qualify for the role, you must have

• You should be fluent in English (C1)
• 4+ years of related work experience
• Relevant professional experience in:
• Risk Management Services
• Data Risk / Information Security / Data Exfiltration
• Compliance or operational governance processes
• Experience working with structured processes, workflows or case management systems
• Ability to analyze information and support risk‑based decision‑making
• Experience engaging with senior stakeholders demonstrating confidence in communication and presenting risk‑related topics

Ideally, you’ll also have

• IAPP certifications (either CIPP/E, CIPP/US and/or CIPM)

What We Look For

• A risk‑aware mindset, balancing business needs with data protection requirements
• Confidence in working within a new and evolving process environment
• Strong ownership and accountability for quality and outcomes
• Ability to collaborate effectively across geographies and seniority levels
• A continuous improvement mindset, contributing to shaping a scalable and sustainable global service

What We Offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well‑known brands from across the globe. We’ll introduce you to an ever‑expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long‑term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Compliance Statement

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow‑up actions. Any misconduct should be reported through the EY Ethics Hotline.