E

Ernst & Young

Global professional services: consulting, assurance, tax

Data Privacy and Data Governance - Supervising Associate

Privacy & Data ProtectionUpdated on Nov 14
Full-timeRemote in USA$85.2k - $181k

About the Job

Requirements

  • A bachelor’s degree or equivalent work experience is required.
  • Approximately 3–5+ years of related experience is required.
  • Ability to learn and understand firm data protection and governance policies, as well as risk management initiatives outside the area of expertise.
  • Ability to independently manage tasks, consultations, reporting activities, and deliverables on time and take responsibility for defined outcomes.
  • Ability to analyze data, evaluate evidence, identify root causes, and communicate findings and recommendations clearly and actionably.
  • Experience performing control testing, quality assurance reviews, monitoring activities, or compliance assessments in a risk management, privacy, or governance environment.
  • Understanding of internal controls, risk assessment methodologies, quality management principles, and continuous improvement practices.
  • Understanding of high-level technology issues surrounding information security and the firm’s application architecture for applications that process personal or client-confidential data.
  • Basic knowledge of project management tools and methodologies.
  • Ability to keep sensitive information confidential.
  • Strong research, synthesis, executive communication, and stakeholder management skills.
  • Advanced proficiency with Microsoft Excel, including pivot tables, lookup formulas, data validation, and data analysis.
  • Advanced proficiency with PowerPoint and working knowledge of Power BI reporting to synthesize data, identify trends, and create stakeholder-ready materials.
  • Overtime is required throughout the year and varies based on volume.

Responsibilities

  • Support data protection business enablement for client-serving teams, strategic accounts, service line quality teams, and functional stakeholders by helping them understand requirements and apply practical, risk-based guidance.
  • Develop and update enablement materials, communications, playbooks, and presentations that translate data protection and governance policies, processes, and control expectations into clear, actionable guidance for business teams.
  • Maintain, organize, and continuously improve data protection and governance enablement content and communication plans to support consistent messaging across stakeholder groups.
  • Perform data validation and reconciliation across multiple systems and data sources to ensure the accuracy, completeness, and reliability of management reporting.
  • Conduct data protection and governance research and draft policies or awareness materials.
  • Identify and extract key issues and risks related to risk management functions or processes by comparing facts and circumstances with current firm policies, procedures, and data protection and governance expectations.
  • Identify opportunities to improve data collection, standardization, automation, and governance practices to enhance reporting quality and decision-making.
  • Understand complex, non-routine questions from client teams regarding data protection and governance and coordinate appropriate responses through consultation.
  • Propose improvements or develop new approaches, policies, or guidance by applying knowledge of existing risk management processes, business experience, and stakeholder needs.
  • Work with service line quality teams to understand and recommend enhancements to enablement, reporting, monitoring, and risk mitigation activities.
  • Maintain and expand knowledge of the field and communicate new developments and their impact to clients and team members.
  • Build relationships and a network across the team and firm enabling functions to support timely issue resolution and a consistent stakeholder experience.
  • Handle other related projects as assigned.
  • Apply sound judgment to enablement consultations, reporting reviews, control testing, and escalated data protection and governance questions, considering requirements, stakeholder needs, and practical risk mitigation options.
  • Evaluate control effectiveness, assess the significance of identified issues, and determine appropriate escalation or remediation actions.
  • Interpret testing results and quality review findings to identify trends, emerging risks, and opportunities to strengthen data protection and governance processes and controls.
  • Translate business requirements into reporting solutions and visualizations that support executive decision-making and operational oversight.
  • Coordinate work across local or virtual teams by driving next steps, clarifying accountability, and following through on commitments.
  • Explain firm and regulator data protection and governance requirements in concise, business-appropriate language for client-serving teams.
  • Support change and adoption of new tools, dashboards, processes, and reporting expectations in a fast-moving enablement environment.
  • Listen to stakeholders, interpret their needs, frame issues clearly, and tailor messaging for business, risk, and executive audiences.
  • Handle multiple projects and initiatives simultaneously while remaining organized, responsive, and accurate.
  • Review unique and complex situations using existing policies and professional knowledge, consult with client teams, and propose solutions.
  • Respond to escalated or time-sensitive data protection and governance matters with appropriate urgency, discretion, attention to detail, and sound consultation judgment.

Desired Qualifications

  • Privacy certification and compliance certification are preferred.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs