RMS - US Data Protection Senior Associate (VDD) - EY GDS

The opportunity This role requires regular interaction with US Data Protection team on day-to-day basis to understand business requirements and deliver data protection solutions. The Senior Associate will lead compliance initiatives, manage privacy assessments, and ensure robust governance of Records of Processing Activities (ROPA)., Privacy Impact Assessment (PIA), Data Protection Vendor Due Diligence. Your key responsibilities Expertise in Data Protection Regulations. Stay ahead of regulatory changes and advise on strategic compliance improvements. Knowledge of US and global privacy laws (e.g., GDPR, CCPA, PDPL, DPDPA). Timely delivery of quality work and achieving the objectives set based on the determined process methodology which includes the PIA assessments Vendor Due Diligence and ROPA related activities. Oversee the accurate and up-to-date documentation of data processing activities across teams, including collecting, validating, and updating processing activity records and ensuring compliance with applicable data protection laws; Draft the Privacy notices and other related PIA documentation. Review PIA responses for completeness, accuracy, and alignment with privacy requirements. Efficient handling of communications and timely response to or escalation of inquiries. Collaborate with system owners and project teams to align privacy initiatives with organizational objectives as well as to gather missing information, follow up on action items, and track open tasks through completion. Collaborate on the process gaps and lead initiatives for automation and process improvements; assist with preparation of metrics, dashboards, and periodic reports for leadership on PIA volume, processing timelines, and ROPA updates. Stay informed on emerging technologies and assess privacy implications Proactively plan and prioritize daily tasks and keep the team informed of the status. Skills and attributes for success Strong decision-making and problem-solving capabilities, with a focus on risk assessment and mitigation. Demonstrated analytical skills, including the ability to interpret complex information, identify issues, and recommend next steps. Excellent English communication skills (verbal and written) for stakeholder engagement Familiarity with compliance and privacy assessment. Proficiency in MS Office tools (Excel, PowerPoint, Word) Quality focus and attention to details and ability to manage multiple priorities and deadlines in a fast-paced environment. Flexibility to adapt to changing processes and tools. Collaborative mindset and leadership qualities. To qualify for the role, you must have Fluent English (C1 or above). 3–5 years of experience in Data Risk, Data Governance, Data Protection, Privacy, Compliance, Information Security, Technology Risk, Data Stewardship, or related areas. Experience supporting implementation of governance, compliance, risk management, or data protection activities. Experience working with stakeholders across different business, risk, and technology functions. Ability to coordinate activities, manage deliverables, and drive assigned responsibilities with limited supervision. Ideally, you’ll also have Experience working in a global or matrix organization. Familiarity with data governance, privacy, information security, or regulatory compliance frameworks. Experience supporting process improvement, change management, or transformation initiatives. Exposure to client-facing or stakeholder-facing environments. IAPP certification (CIPP/E, CIPP/US, CIPM) or similar qualifications.