Risk Analyst - EY GDS
EY · Caba
The opportunity
The Area/Regional Data Risk Controls Analyst will support the implementation and adoption of EY’s data protection strategy within an assigned geographic area or region. The role will help deploy and operationalise data protection controls, including controls that mitigate data exfiltration risk, while ensuring regional business requirements, regulatory considerations and operational realities are appropriately addressed.
Working with Information Security, technology teams and business stakeholders, the analyst will help translate global requirements into practical regional implementation, track progress and remediation, coordinate stakeholder activity and support the consistent adoption of data protection controls.
Your key responsibilities
Control deployment and regional implementation
- Support the deployment, adaptation and operational management of data protection controls across the assigned area or region.
- Translate global requirements into practical regional implementation steps that reflect local business, regulatory and operational needs.
- Coordinate with Information Security teams, technology teams, product owners and business stakeholders to support implementation and resolve delivery issues.
- Support Dataguard and related data protection activities while remaining adaptable to the broader Data Risk Controls portfolio.
Risk management, remediation and reporting
- Track implementation progress, remediation actions, risk mitigation plans, dependencies and key programme milestones.
- Support the identification, assessment, escalation and resolution of data protection risks and control issues.
- Maintain clear and accurate reporting on implementation status, risks, decisions and follow-up actions for regional and global stakeholders.
- Help ensure remediation activities are executed consistently and issues are progressed to appropriate owners.
Stakeholder coordination and adoption
- Act as a liaison between global programme teams and regional stakeholders for control deployment and adoption.
- Serve as a regional point of contact for implementation requirements, operational questions and stakeholder follow-up.
- Support communications, education and awareness activities that improve understanding and adoption of data protection requirements.
- Build effective working relationships across geographies and organisational boundaries.
Skills and attributes for success
- Practical understanding of technology risk, information security, data protection and internal controls.
- Ability to coordinate multiple activities, manage dependencies and meet deadlines in a fast-paced and changing environment.
- Strong written communication, presentation and stakeholder engagement skills.
- Demonstrated collaboration, negotiation and influencing skills.
- Ability to connect technical controls, business requirements and risk outcomes in clear, practical language.
- Strong attention to detail in tracking actions, reporting status and maintaining supporting information.
To qualify for the role you must have
- Demonstrated experience in Technology Risk Management, Information Security, Governance, Risk and Compliance, data protection or a related discipline.
- A degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
- Working knowledge of recognised policy and control frameworks, such as ISO or COBIT.
- Strong English language skills, including writing, presentation, interpersonal and communication capabilities.
- Experience coordinating stakeholders, tracking remediation activity and supporting the implementation of risk or control initiatives.
- Ability to work effectively in a globally distributed team and engage stakeholders across different levels of the organisation.
Ideally, you’ll also have
- A relevant certification, such as CRISC, CISM, CISA or CISSP, or progress towards an equivalent qualification.
- Experience supporting data protection, data loss prevention, control deployment or technology risk remediation initiatives.
- Awareness of external risk trends, data protection requirements and business standards.
- An understanding of EY business and Service Line risk priorities.
What we look for
We seek a highly organised and collaborative professional who can coordinate security and risk activities, engage stakeholders and support consistent execution across a region. The ideal candidate combines sound judgement, strong programme coordination and communication skills, and practical experience in technology risk or information security. The person will be comfortable translating global requirements into measurable regional actions and following those actions through to completion.
What we offer
As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial and social well-being. Your recruiter can talk to you about the benefits available in your country. Here’s a snapshot of what we offer:
- Continuous learning: You will develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way.
- Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs.
We ensure that individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job functions and to receive other benefits and privileges of employment. Please contact us to request accommodations.
EY is committed to being an inclusive employer, and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service while allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Build your legacy with us. Apply now.