Rodeo
Get started

EY

Data Protection Manager (L3) - Risk Management - CBS - Manchester

Manchester
Posted 14 days ago
Sign up to applySee more jobs like this

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

Data Protection Assistant Director (L3) – Risk Management, CBS – Manchester

About EY

At Ernst & Young (EY), we’re dedicated to shaping your future with confidence. We empower diverse teams globally to drive progress, offering opportunities for professional growth and career advancement. Join EY and contribute to building a better working world today.


About the Role

The UK Data Protection team, part of Central UK Risk Management, ensures EY compliance with data protection and privacy laws, including:

  • UK General Data Protection Regulation (GDPR)
  • Data Protection Act 2018
  • Data (Use and Access) Act 2025
  • Privacy and Electronic Communications Regulations

Key functions include:

  • Developing, implementing, and maintaining data protection policies, standards, and procedures
  • Providing guidance on complex privacy matters
  • Conducting training and awareness initiatives
  • Enforcing compliance across EY’s global operations

This role sits alongside specialists in Anti-Money Laundering, Financial Crime, Conflicts, and Compliance Risk.


The Opportunity

As a Data Protection Manager, you’ll play a senior role in:

  • Advising the business on high-risk privacy and compliance issues
  • Delivering clear, commercially driven solutions aligned with legal frameworks
  • Leading complex workstreams and contributing to strategic improvements in EY’s privacy risk framework

Your autonomy will allow you to:

  • Own critical areas of data protection accountability
  • Drive consistent practices across the firm
  • Contribute to the evolution of EY’s privacy risk management frameworks

Key Responsibilities

Advisory and Escalation

  • Provide senior-level guidance on complex, high-risk privacy matters with a risk-based, business-aligned approach

Frontline Compliance Oversight

  • Data subject rights requests management
  • Data incident and breach investigations (e.g., fact-finding, containment, mitigation)
  • Conduct Privacy Impact Assessments (PIAs) and Legitimate Interest Assessments (LIAs)
  • Perform compliance reviews and health checks

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.

Risk Assessment and Challenge

  • Review and question existing risk assessments to ensure appropriate controls, mitigations, and governance mechanisms

Framework, Policy & Embedding

  • Develop, implement, and maintain robust data protection frameworks, training programs, and operational policies

Delivery and Continuous Improvement

  • Own multiple cross-functional workstreams, ensuring timely, high-quality execution
  • Continuously refine and enhance data protection processes

Stakeholder Management and Influence

  • Build cross-department collaboration across EY’s global teams
  • Influence senior leadership on privacy obligations with clear, actionable advice

Training and Awareness

  • Deliver targeted training to embed a privacy-first culture enterprise-wide
  • Actively support awareness campaigns to raise data protection consciousness

Leadership and Strategic Contribution

  • Lead complex initiatives within UK Data Protection
  • Support global privacy framework evolution and strategic compliance projects

Behaviours, Skills & Attributes

Essential Qualities:

  • Independent multitasker capable of handling high-pressure, multistream priorities
  • Strong commercial acumen – balancing regulatory compliance with business goals
  • Analytical & resourceful problem solver
  • Influential communicator – delivering authoritative advice (e.g., to senior stakeholders) with adversarial approach
  • Proven ability to lead complex projects with ownership of outcomes
  • Resilience and adaptability in a fast-moving environment
  • Balanced outlook – maintaining pragmatism and positivity under pressure
  • Collaborative teamwork ethos with a calculus drive for quality

Key Traits:

  • Dash, clear communication
  • Political awareness and stakeholder influence
  • Detail-oriented mindfulness
  • Ongoing professional self-development

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job

Qualifications & Experience

Essential Requirements

  • Minimum of 4 years’ post-qualified experience in:
    • Data protection, privacy, risk, compliance, or legal domains (related fields also considered)
  • In-depth knowledge of UK GDPR, DPA 2018, and risk-based compliance frameworks
  • Experience handling complex data protection issues and engaging diverse stakeholders
  • Recognised privacy certification, e.g.:
    • CIPP*E
    • CIPM
    • ISEB Certificate in Data Protection
    • PC.dp or equivalent

Ideal Experience

  • Commercial/organisational experience applying data protection regulations
  • Offer from regulated sectors (Financial Services, Professional Advisory)

Benefits at EY

  • Competitive total rewards, performance-driven base salary
  • FlexEY benefits selection tailored to your life (e.g., flexible working, health, savings)
  • Career development with continuous learning opportunities
  • Self-directed growth through coaching, empowerment, leadership programmes
  • Global inclusion culture fostering diversity, collaboration, and meaningful impact
  • Support in achieving your balance while advancing in your career

EY is committed to equality, flexibility and employee well-being. We welcome all candidates, including those exploring changing their work arrangements.


What awaits you here isn’t just a job—it’s a long-term shape-shifting toward your career ambitions, aligned with Purpose’s vision.

Join us in building a better working world. Apply now for [Data Protection Assistant Director (L3) – Manchester] role.


EY | Building a Better Working World

We leverage data-driven innovation and AI to help clients anticipate challenges, plan for uncertainty, and thrive. That’s transformative, locally delivered across 150+ territories, with collaboration-driven solutions.

Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Skills

Data Protection Law
Privacy Risk Management
Stakeholder Management
Regulatory Compliance
Incident Investigation
Privacy Impact Assessments
Legitimate Interest Assessments
Risk Assessment
Policy Development
Commercial Acumen
Analytical Problem Solving
Strategic Planning
Training Delivery
Communication
Leadership
Decision Making

Location

Manchester, England, United Kingdom

Sign up to applySee more jobs like this