EY
Data Protection Manager (L3) - Risk Management - CBS - Manchester

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Data Protection Assistant Director (L3) – Risk Management, CBS – Manchester
About EY
At Ernst & Young (EY), we’re dedicated to shaping your future with confidence. We empower diverse teams globally to drive progress, offering opportunities for professional growth and career advancement. Join EY and contribute to building a better working world today.
About the Role
The UK Data Protection team, part of Central UK Risk Management, ensures EY compliance with data protection and privacy laws, including:
- UK General Data Protection Regulation (GDPR)
- Data Protection Act 2018
- Data (Use and Access) Act 2025
- Privacy and Electronic Communications Regulations
Key functions include:
- Developing, implementing, and maintaining data protection policies, standards, and procedures
- Providing guidance on complex privacy matters
- Conducting training and awareness initiatives
- Enforcing compliance across EY’s global operations
This role sits alongside specialists in Anti-Money Laundering, Financial Crime, Conflicts, and Compliance Risk.
The Opportunity
As a Data Protection Manager, you’ll play a senior role in:
- Advising the business on high-risk privacy and compliance issues
- Delivering clear, commercially driven solutions aligned with legal frameworks
- Leading complex workstreams and contributing to strategic improvements in EY’s privacy risk framework
Your autonomy will allow you to:
- Own critical areas of data protection accountability
- Drive consistent practices across the firm
- Contribute to the evolution of EY’s privacy risk management frameworks
Key Responsibilities
Advisory and Escalation
- Provide senior-level guidance on complex, high-risk privacy matters with a risk-based, business-aligned approach
Frontline Compliance Oversight
- Data subject rights requests management
- Data incident and breach investigations (e.g., fact-finding, containment, mitigation)
- Conduct Privacy Impact Assessments (PIAs) and Legitimate Interest Assessments (LIAs)
- Perform compliance reviews and health checks
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Risk Assessment and Challenge
- Review and question existing risk assessments to ensure appropriate controls, mitigations, and governance mechanisms
Framework, Policy & Embedding
- Develop, implement, and maintain robust data protection frameworks, training programs, and operational policies
Delivery and Continuous Improvement
- Own multiple cross-functional workstreams, ensuring timely, high-quality execution
- Continuously refine and enhance data protection processes
Stakeholder Management and Influence
- Build cross-department collaboration across EY’s global teams
- Influence senior leadership on privacy obligations with clear, actionable advice
Training and Awareness
- Deliver targeted training to embed a privacy-first culture enterprise-wide
- Actively support awareness campaigns to raise data protection consciousness
Leadership and Strategic Contribution
- Lead complex initiatives within UK Data Protection
- Support global privacy framework evolution and strategic compliance projects
Behaviours, Skills & Attributes
Essential Qualities:
- Independent multitasker capable of handling high-pressure, multistream priorities
- Strong commercial acumen – balancing regulatory compliance with business goals
- Analytical & resourceful problem solver
- Influential communicator – delivering authoritative advice (e.g., to senior stakeholders) with adversarial approach
- Proven ability to lead complex projects with ownership of outcomes
- Resilience and adaptability in a fast-moving environment
- Balanced outlook – maintaining pragmatism and positivity under pressure
- Collaborative teamwork ethos with a calculus drive for quality
Key Traits:
- Dash, clear communication
- Political awareness and stakeholder influence
- Detail-oriented mindfulness
- Ongoing professional self-development


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Qualifications & Experience
Essential Requirements
- Minimum of 4 years’ post-qualified experience in:
- Data protection, privacy, risk, compliance, or legal domains (related fields also considered)
- In-depth knowledge of UK GDPR, DPA 2018, and risk-based compliance frameworks
- Experience handling complex data protection issues and engaging diverse stakeholders
- Recognised privacy certification, e.g.:
- CIPP*E
- CIPM
- ISEB Certificate in Data Protection
- PC.dp or equivalent
Ideal Experience
- Commercial/organisational experience applying data protection regulations
- Offer from regulated sectors (Financial Services, Professional Advisory)
Benefits at EY
- Competitive total rewards, performance-driven base salary
- FlexEY benefits selection tailored to your life (e.g., flexible working, health, savings)
- Career development with continuous learning opportunities
- Self-directed growth through coaching, empowerment, leadership programmes
- Global inclusion culture fostering diversity, collaboration, and meaningful impact
- Support in achieving your balance while advancing in your career
EY is committed to equality, flexibility and employee well-being. We welcome all candidates, including those exploring changing their work arrangements.
What awaits you here isn’t just a job—it’s a long-term shape-shifting toward your career ambitions, aligned with Purpose’s vision.
Join us in building a better working world. Apply now for [Data Protection Assistant Director (L3) – Manchester] role.
EY | Building a Better Working World
We leverage data-driven innovation and AI to help clients anticipate challenges, plan for uncertainty, and thrive. That’s transformative, locally delivered across 150+ territories, with collaboration-driven solutions.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills