Hybrid Global Data Privacy Incident Response Director

EY; Katowice; Hybrid; PLN 300,000 - 420,000; Full time

Job summary

EY GDS Poland is inviting applications for a Data Protection Incident Response – Assistant Director role based in Wrocław/Katowice. The position focuses on advising on data privacy matters within EY’s Global Delivery Services, supporting the GCO and Global Lead Counsel – Data Incident Response.

You will coordinate with InfoSec, Risk Management, and GC teams to manage multi-jurisdictional incidents. The role emphasizes leading a team of legal professionals, developing incident response

Qualifications

• Must be a qualified lawyer with consistent strong academic record.
• Mandatory a CIPP (E) certified. Other recognised privacy certifications (e.g., CIPM, CIPT) will be considered an advantage.

Responsibilities

• Provide legal oversight and guidance on the management of global data protection and privacy incidents ensuring compliance with EY policies, applicable laws, and regulatory requirements.
• Support the Global Deputy Lead Counsel – Data Protection Incident Response and the Chief Privacy Officer in the management of complex and strategically significant data incidents.
• Coordinate with Information Security, Risk Management, General Counsel teams, and other key stakeholders to ensure data incidents are managed consistently and effectively across jurisdictions.
• Develop and maintain oversight of data incident tracking, reporting, metrics, and trend analysis to support risk management and executive reporting across the EY organisation.
• Support the implementation and continuous improvement of EY’s global data incident response framework, policies, procedures, and governance processes.
• Communicate the global data incident response programme and related requirements, providing guidance and support on the management of cross-border data incidents
• Identify, assess, and elevate significant legal and regulatory issues arising from data incidents, including matters involving complex jurisdictional considerations or emerging regulatory developments.
• Collaborate with various stakeholders, including data protection, risk management, Infosec and General Counsel teams globally to ensure a coordinated response to incidents.
• Contribute to the development and delivery of training, awareness initiatives, and guidance materials to strengthen understanding of data protection obligations and data incident response requirements across EY.
• Oversee onboarding, capability building, and career development initiatives within the team.
• Allocate work, manage utilization, and ensure delivery aligned with SLAs, quality measures, and stakeholder expectations.
• Provide coaching, performance feedback, and development support to team members.
• Stakeholder management and assistance in business development initiatives.

Skills

Data privacy

Cross-border incidents

Legal leadership

Stakeholder management

English communication

Education

Qualified lawyer

CIPP (E) certification

Job description

EY GDS Poland is inviting applications for a Data Protection Incident Response – Assistant Director role based in Wrocław/Katowice. The position focuses on advising on data privacy matters within EY’s Global Delivery Services, supporting the GCO and Global Lead Counsel – Data Incident Response.

You will coordinate with InfoSec, Risk Management, and GC teams to manage multi-jurisdictional incidents. The role emphasizes leading a team of legal professionals, developing incident response