Data Stewardship - Risk and Controls Senior Associate

• Act as part of a centralized team responsible for intake, triage and processing of data transfer exception requests across multiple controls and regions

• Perform initial review of exception requests, ensuring completeness, appropriate business justification, and required approvals

• Conduct risk-based assessment of requests, identifying potential data protection, confidentiality and insider threat risks

• Provide clear recommendations and summaries to support decision-making by control owners and approvers

Coordinate across multiple stakeholders, including:

• Engagement teams

• Information Security teams

• Control owners

• Data Risk Leaders/ Risk Management Leaders

• Track requests through their lifecycle, ensuring timely processing and adherence to defined SLAs

• Maintain accurate documentation of requests, decisions, and conditions applied

• Support development of centralized reporting and dashboards, identifying trends, recurring risks and improvement opportunities

• Contribute to process standardization and documentation (playbooks, SOPs, guidance materials)

• Provide guidance to requestors on secure alternatives and compliant data transfer practices

• Strong understanding of data protection, confidentiality and information security principles

• Ability to apply structured, risk-based thinking in operational decision support

• High attention to detail and ability to manage process-driven work with accuracy and consistency

• Strong communication and stakeholder management skills in a global, cross-functional environment

• Ability to prioritize and manage multiple requests across tools and processes

• A proactive mindset with focus on continuous improvement and standardization

Good knowledge of :

• Data transfer channels

•

• Data exfiltration controls

• EY Acceptable Use of Technology Policy and relevant InfoSec guidance

• Data risk mitigation/remediation

• You should be fluent in English (C1)

• 4+ years of related work experience

• Relevant professional experience in:

• Risk Management Services

• Data Risk / Information Security / Data Exfiltration

• Compliance or operational governance processes

• Experience working with structured processes, workflows or case management systems

• Ability to analyze information and support risk-based decision-making

• Experience engaging with senior stakeholders demonstrating confidence in communication and presenting risk-related topics

• IAPP certifications (either CIPP/E, CIPP/US and/or CIPM)

We are looking for a motivated and detail-oriented professional with a strong interest in data risk and operational governance. The ideal candidate demonstrates:

• A risk-aware mindset, balancing business needs with data protection requirements

• Confidence in working within a new and evolving process environment

• Strong ownership and accountability for quality and outcomes

• Ability to collaborate effectively across geographies and seniority levels

• A continuous improvement mindset, contributing to shaping a scalable and sustainable global service

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations –  Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

•