GDPR and Technology Risk - Senior Consultant

Here at EY, you’ll have the chance to build a truly exceptional experience. We’ll empower you with the latest technology, surround you with high-performing teams, and provide the global scale and diverse and inclusive culture you need to discover your full potential. Through our coaching and training programs, you’ll develop the skillsets you need to stay relevant today and in the future – all while building a network of colleagues, mentors, and leaders who will be on the journey with you at EY and beyond.

The exceptional EY experience. It's yours to build. 

The opportunities: your next adventure awaits

As a member of the Data Protection/Technology Risk Practice, you will be working on a various range of technical, regulatory, process and business-based topics.

Your responsibilities

You will be mainly in charge of:

• Providing regulatory assessments on data protection matters to a wide range of clients from the financial services, commercial, healthcare and Fintech sectors.
• Preparing and reviewing data protection-related documents such as policies and procedures, registers, data protection automations, and workflows.
• Assisting in GDPR certification projects.

• Assisting in Data Governance projects.
• Assessing GDPR matters on artificial intelligence and automated decision-making projects.
• Conducting Data Protection Impact Assessments (DPIAs), management of data subjects’ requests and data breaches.
• Providing data protection awareness sessions and trainings in collaboration with information security experts.
• Carrying out assessments using the GDPR (regulation at large), good practice framework such as CARPA (CNPD), and international data protection frameworks.
• Reviewing cookies management practices and drafting cookies policies.
• Conducting technology watch exercises and training on advanced GDPR tools for data retention, Register of Processing Activities (RoPA) automation, and Data Subject Requests (DSRs). 

To learn more about our service offerings, please visit What you can do here.

What we look for

• You have an agile, dynamic and growth-oriented mindset. What you know matters. But the right mindset is just as important in determining success. We’re looking for people who are innovative, can work in an agile way and keep pace with a rapidly changing world.
• You are curious and purpose driven. We’re looking for people who see opportunities instead of challenges, who ask better questions to seek better answers that build a better working world.
• You are inclusive. We’re looking for people who seek out and embrace diverse perspectives, who value differences, and team inclusively to build safety and trust. 

Qualifications

• You have between 2 and 5 years of relevant experience in a similar working environment, particularly in data protection and technology risk.
• You have a thorough understanding of European data protection laws and regulations and awareness of their application in Luxembourg.
• You hold a master’s degree – in particular, specializing in a field related to technology and data protection.
• Certifications such as IAPP are a plus.
• Knowledges and past experience in data protection matters, including GDPR and data governance, is an asset.

• You are fluent in English and French. Any other language will be considered as an asset.
• You demonstrate excellent writing, communication, and presentation skills.

• You show well-established organizational, multitasking, and prioritization skills.
• You appreciate working in a highly dynamic and international environment.
• You are a flexible, proactive and initiative-driven professional with a consulting mindset, capable of adapting quickly to challenging and fast-paced environments. 
• You possess a general understanding of Artificial Intelligence and emerging technologies and have a strong eagerness to acquire new skills.

What’s in it for you

• Accelerate your technical capabilities and transformative leadership skills with future-focused courses and development programs.
• Broaden your horizons by working on highly integrated teams across the globe and collaborate with people of diverse backgrounds — both professionally and culturally.
• Bring out the best in yourself with continuous investment in your personal well-being and career development.
• Develop your own personal purpose and help us create a positive ripple effect on our teams, our business, clients and society – building a better working world, together.

What you can expect

• First HR Call
• Technical interview with Business Hiring Manager
• Technical test if applicable

Our offer of employment is contingent upon the successful completion of a background check and pre-screening requirements. The candidate acknowledges that all information provided must be accurate.