Job Description

EY – Cyber Security Manager – Data Protection and Privacy Platforms Engineering

Job Listing Detail

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. We’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

The Opportunity

We’re looking for a Manager in our Cyber Security team with a strong focus on Data Protection and Privacy Platforms Engineering. This role is centered on the implementation, engineering, integration, and administration of enterprise scale data protection and privacy technologies, helping organizations protect sensitive data across endpoints, networks, cloud, applications, and AI enabled platforms.

You will work closely with clients to design and operationalize Data Loss Prevention (DLP), data discovery and classification, privacy management platforms, and privacy enhancing technologies (PETs)—enabling compliant, secure, and trusted use of data in modern digital and AI driven environments.

Your Key Responsibilities

• Lead the design, implementation, and engineering of enterprise data protection and privacy platforms, including DLP, data discovery, classification, and privacy tooling.
• Implement and administer Data Loss Prevention (DLP) solutions across endpoint, email, network, cloud, and SaaS environments.
• Design and operationalize data discovery and data classification programs, enabling visibility into sensitive data across structured and unstructured sources.
• Engineer and integrate privacy platforms supporting consent management, data subject rights (DSR/DSAR), records of processing, and privacy workflows.
• Implement and support Privacy Enhancing Technologies (PETs) such as tokenization, pseudonymization, anonymization, encryption, and data masking.
• Integrate data protection and privacy platforms with cloud, data, and AI ecosystems, including data lakes, analytics platforms, and AI/ML pipelines.
• Manage Microsoft Purview Information Protection (Labeling) for data classification, sensitivity labeling, and policy enforcement
• Configure and manage policy driven controls aligned with regulatory requirements (e.g., GDPR, regional privacy laws) and organizational data governance standards.
• Conduct platform configuration reviews, tuning, and optimization to improve effectiveness and reduce false positives.
• Support incident response and investigations related to data leakage, privacy breaches, and policy violations.
• Collaborate with security architecture, cloud, data, legal, and compliance teams to ensure end to end data protection.
• Develop operational runbooks, technical documentation, and standard operating procedures for privacy and data protection platforms.
• Mentor and guide junior engineers and consultants, fostering strong engineering and operational discipline.
• Engage with client stakeholders to translate privacy and data protection requirements into practical, implementable technical solutions.

Skills and Attributes for Success

• Strong hands on experience in data protection and privacy platforms engineering.
• Deep understanding of data discovery, data classification, and data lifecycle controls.
• Strong knowledge of DLP architectures and policy design across endpoint, cloud, and SaaS.
• Experience implementing privacy enhancing technologies (PETs) and data security controls.
• Ability to work across cloud, data, and AI environments, supporting secure data usage.
• Strong troubleshooting and problem solving skills in complex, enterprise environments.
• Ability to communicate effectively with technical teams, privacy officers, and business stakeholders.
• Consulting mindset with the ability to manage multiple client engagements and priorities.

To Qualify for the Role, You Must Have

• 10–14 years of experience in Information Security, with strong focus on Data Protection, Privacy Engineering, or Platform Implementation.
• Hands on experience implementing and administering DLP solutions (endpoint, email, cloud, network).
• Experience with data discovery and classification technologies across structured and unstructured data.
• Practical experience with privacy platforms supporting DSAR/DSR, consent, and privacy workflows.
• Strong understanding of data protection controls such as encryption, key management, tokenization, and masking.
• Experience working in hybrid and cloud environments.
• Relevant certifications such as CIPP/E, CIPM, CISSP, or equivalent are an advantage.

Ideally, You’ll Also Have

• Experience working in a consulting or professional services environment.
• Exposure to AI and analytics platforms, with focus on protecting sensitive training and inference data.
• Familiarity with global privacy regulations and how they translate into technical controls.
• Experience integrating privacy and data protection platforms with SIEM/SOAR or SOC processes.
• Strong interpersonal skills and the ability to build trusted client relationships.
• A proactive, hands on approach to solving complex data protection challenges.

What We Look For

• Professionals with a strong engineering and implementation mindset, not just advisory knowledge.
• Ability to lead data protection and privacy platform delivery for complex enterprise clients.
• Comfort engaging with CISOs, DPOs, Legal, Data, and Cloud teams.
• Experience in RFP responses, solution design, effort estimation, and go to market activities is a plus.
• Passion for enabling secure, compliant, and trusted use of data in modern digital and AI driven organizations.