Data Privacy and Protection Consultant Ernst & Young AE

In this role, you will take part in managing and providing end-to-end support on all data privacy & protection projects, which includes being up to date with latest trends, including global data protection compliance regulations, policies, and procedures. You will also manage and lead client communications and regular status updates as well as ensure delivery of high-quality reports to the client.

You will assist in managing the financial aspects of engagements by organizing staffing, tracking fees and communicating issues to project leaders. You will also establish, maintain and strengthen internal and external relationships. You'll actively contribute to improving operational efficiency on projects and internal initiatives and will consistently drive projects to completion, determining that the work is of high quality.

You and the engagement teams will support and implement a broad range of clients on multiple data privacy & protection areas such as:

• Data protection gaps and maturity assessment
• Data mapping and classification
• Data protection impact assessment (DPIA)
• Maintenance of records of processing activities (RoPA)
• Data Subject Access Request (DSAR)
• Data privacy target operating model, policies, and procedures
• Data retention, backup and archival
• Data protection technology such as masking, encryption, pseudonymisation, masking or tokenisation

To qualify for the role, you must have

• Bachelor's degree and at least 3 years of related work experience
• Knowledge of designing and implementing Data Protection technologies
• Experience in privacy and security risk assessments
• Knowledge of data protection laws and regulations (International & GCC) and industry standards and frameworks
• Knowledge of core Information Security concepts related to Governance, Risk & Compliance
• Ability to understand client organisations and their business processes to effectively tailor to their privacy requirements
• Effective communication skills with different stakeholders about data protection and privacy matters
• Technical architecture experience integrating data protection software into clients' infrastructure