Data Protection Incident Response - Assistant Director

Location: Wrocław/Katowice, 2 days office/3 days remote

Data Protection Incident Response - Assistant Director

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

This is a fantastic opportunity to be part of a leading firm whilst playing an instrumental role in advising on data privacy related matters. We are looking for an experienced lawyer with expertise in the data privacy domain to join EY’s Global Delivery Services (GDS) team supporting the General Counsel’s Office (GCO).

The successful candidate will work closely with the Global Lead Counsel – Data Incident Response (a Director in Global Data Protection responsible for the Global Incident Response program) to support the maintenance, coordination and continuous improvement of the Global Incident Response (IR) Program in collaboration with key stakeholders and data protection teams around the world.

The role will also play a key part in supporting the management of multijurisdictional incident responses.

You will work closely with business and Information Security stakeholders and Data Protection leadership and team members.

Your key responsibilities

• Provide legal oversight and guidance on the management of global data protection and privacy incidents ensuring compliance with EY policies, applicable laws, and regulatory requirements. • Support the Global Deputy Lead Counsel – Data Protection Incident Response and the Chief Privacy Officer in the management of complex and strategically significant data incidents. • Coordinate with Information Security, Risk Management, General Counsel teams, and other key stakeholders to ensure data incidents are managed consistently and effectively across jurisdictions. • Develop and maintain oversight of data incident tracking, reporting, metrics, and trend analysis to support risk management and executive reporting across the EY organisation. • Support the implementation and continuous improvement of EY’s global data incident response framework, policies, procedures, and governance processes. • Communicate the global data incident response programme and related requirements, providing guidance and support on the management of cross-border data incidents • Identify, assess, and escalate significant legal and regulatory issues arising from data incidents, including matters involving complex jurisdictional considerations or emerging regulatory developments. • Collaborate with various stakeholders, including data protection, risk management, Infosec and General Counsel teams globally to ensure a coordinated response to incidents. • Contribute to the development and delivery of training, awareness initiatives, and guidance materials to strengthen understanding of data protection obligations and data incident response requirements across EY. • Oversee onboarding, capability building, and career development initiatives within the team. • Allocate work, manage utilization, and ensure delivery aligned with SLAs, quality measures, and stakeholder expectations. • Provide coaching, performance feedback, and development support to team members. • Stakeholder management and assistance in business development initiatives.