Data Protection and Privacy - Assistant Director (Data Risk and Incident Manager)

EY; Columbus (OH); On-site; USD 80,000 - 120,000; Full time

Job summary

Join a forward-thinking company as an Assistant Director in Data Protection and Privacy, where you'll manage data risks and incidents while ensuring compliance with vital data privacy laws. This role offers the opportunity to collaborate across various teams, enhancing data protection policies and improving risk management practices. With a focus on professional growth, you'll play a critical role in safeguarding sensitive information and responding effectively to data subject requests. If you're passionate about data privacy and eager to make a significant impact, this position is perfect for you.

Benefits

Comprehensive Benefits

Flexible Work Arrangements

Professional Growth Opportunities

Qualifications

• 4-6+ years of experience in data protection or risk management.
• Strong understanding of data protection laws and compliance.

Responsibilities

• Lead investigations into data incidents and collaborate on remediation.
• Maintain data inventories and ensure compliance with data protection laws.
• Design and implement controls to prevent data loss.

Skills

Data Protection

Privacy Laws (GDPR, CCPA, HIPAA)

Project Management

Investigative Skills

Communication Skills

Education

Bachelor's Degree

Advanced Degree or Privacy Certifications

Job description

Data Protection and Privacy - Assistant Director (Data Risk and Incident Manager)

Join EY as an Assistant Director (Data Risk and Incident Manager) in Data Protection and Privacy to help manage data risks and incidents across our organization.

About the Role

Based in various US locations, you will support our Data Protection program by managing sensitive information, investigating data incidents, and ensuring compliance with data privacy laws. You will collaborate with multiple teams, including Legal, IT, and Executive Leadership, to develop strategies for data risk management, respond to data subject requests, and enhance our data protection policies.

Key Responsibilities

• Lead investigations into data incidents and collaborate on root cause analysis and remediation.
• Maintain and oversee the organization's data inventories and ensure compliance with data protection laws.
• Respond to data access and data subject rights requests efficiently and in accordance with legal requirements.
• Design and implement controls to prevent data loss and detect insider threats.
• Develop and execute strategies to improve data risk management practices and compliance.

Qualifications

• 4-6+ years of experience in data protection, privacy, or risk management roles.
• Strong understanding of data protection laws (e.g., GDPR, CCPA, HIPAA).
• Excellent communication, project management, and investigative skills.
• Bachelor’s degree required; advanced degrees or privacy certifications preferred.

What We Offer

Competitive salary range, comprehensive benefits, flexible work arrangements, and opportunities for professional growth in a global firm committed to building a better working world.