Senior Associate- Data Privacy

The Opportunity

This is a fantastic opportunity to be part of a leading firm whilst being instrumental in advising on data privacy related matters. We are looking for an experienced legal professional with expertise in the Data Privacy domain to be part of EY’s Global Delivery Services (GDS) team supporting the General Counsel’s Office (GCO), to act as EY’s representative and be responsible for supporting the Europe west region with various Data Privacy compliance (PIAs, DPIA, VDD, ROPA, advisory).

Your Key Responsibilities

• Assisting the Business with the PIA Questions on Trustarc and reviewing the PIA questionnaire on Trustarc from local as well as Global perspective.
• Understanding different EY/third party tools and applications by getting into calls with the Business stakeholders and the development teams to determine and mitigate the risks associated with the detailed data flow of the system in different Vendor and EY tools.
• Drafting the Privacy notice, Description of Transfer to ensure compliance.
• Drafting of Action plans on Trustarc to mitigate risks and assist the Business stakeholders in understanding the compliance requirement for mitigating the risks.
• Assisting the Business stakeholders in understanding the feedback and recommendation provided by the EY Member firm from EW.
• Assisting in Special Data Privacy Compliance Projects like ROPA and Vendor Due Diligence.
• Understanding EY structure that are relevant to the transaction from a Data Privacy Perspective such as Internal/external Data transfers and data retention.
• Providing business and legal (data privacy) advice and guidance to internal clients and business stakeholders (Service lines).
• Stakeholder management.

Skills And Attributes For Success

• A subject matter expert in Data Protection laws and having good experience in handling Data Privacy matters.
• Have experience in conducting DPIA/PIA for a Global Company.
• Have extensive experience and knowledge of data privacy matters including GDPR. Experience in Europe West countries would be preferred but is not necessary.
• Have a good understanding of emerging technologies such as cloud computing, RPA, AI etc.
• Excellent interpersonal skills with the ability to effectively communicate with Business stakeholders.
• Experiences in client handling and leading a team of legal professionals.
• Ability to team effectively with onshore legal team and colleagues in other functions.
• Highly responsive with ability to manage high workload volumes efficiently and effectively.
• Solution oriented with focus on exceptional client service.
• Keen attention to detail.
• Strong communication and English language (verbal and written) skills.
• Confidence, maturity and high degree of awareness to be able to work effectively with a broad base of senior-level internal stakeholders.
• Strong sense of personal responsibility and ownership for success of a given task.
• Eagerness to contribute in a team-oriented environment and ability to work cooperatively with other teams and country practices, demonstrating cultural sensitivity;
• High levels of personal energy and appetite for work and success.
• Service-oriented personality, proficient at delivering quality work within deadlines.
• Ability to adapt, cross-skill, up-skill and work towards continuous improvements to improve efficiencies and processes within the team.

To qualify for the role, you must have

Qualifications

• Law Degree with consistent strong academic record.
• Mandatory a CIPP (E) certified.

Experience

• 6-8 years of relevant post-qualification experience (preferably in a multi-national corporate).

Other Personal Characteristics

• Unquestioned ethics and integrity.
• High level of self-confidence and energy.
• High level of intellectual agility, self-motivation, resourcefulness, and patience.
• Attention to detail.

Key skills/competency

• Data Privacy
• GDPR
• DPIA/PIA
• Compliance
• Legal Advisory
• Risk Mitigation
• Stakeholder Management
• Trustarc
• Data Protection Laws
• Vendor Due Diligence