Supervising Associate Global Delivery Services (GDS) Data Protection Lawyer

Function : GDS Legal team

Sub Function : Data Protection

Scope : Global

The opportunity

This is an exciting time to join the GDS Data Protection team as we scale up our program to match the expansion of the business. You will build your professional knowledge and credentials, learn how EY operates globally and work within a cross functional team of professionals to embed and improve the GDS data protection program across its operating locations in Argentina, Hungary, India, Mexico, the Philippines, Poland, Spain, Sri Lanka, UK and other locations as we expand.

The role will be part of the GDS Data Protection team and sit in GDS General Counsels Office (GCO). GDS GCO partners with GDS Risk Management to run the GDS Data Protection program.

Your key responsibilities

The Supervising Associate within GDS Data Protection team will assist in driving aspects of the GDS Data Protection program in collaboration with GDS Global Data Privacy Leader. Responsibilities include assisting with: providing advice and interpretation of data protection legislation and of EYs global privacy framework, advising on privacy impact assessments, data protection third party due diligence, records of processing activities (RoPA) data protection portions of contracts, training, individual rights requests and data access requests more generally (external and internal). You will also be required to assist with: collating management information, preparing management reports, reviewing and updating policies and procedures and instructing and liaising with external counsel, where required. These responsibilities should be balanced with providing day-to-day data protection advice including assisting with setting up new GDS locations. You will be expected to assist with global projects and in global networks.





You will be required to consult and collaborate effectively with key internal stakeholders, such as GDS Lead Counsel and the GDS Chief Privacy Officer, and other stakeholders (e.g., Services Lines, Functions, Risk Management, EY Technology, Records Information Management, Acquisitions, members of the Region DP network, industry vendors) to drive the design and implementation of solutions across the business and geographies.

Skills and attributes for success

- 7-year PQE with minimum 5 years prior professional experience of data protection in the capacity of a legal counsel
- Appreciation for data protection principles and application of controls to protection of confidential and personal data
- The candidate should have experience in operational data protection processes, including but not limited to PIA, individual rights requests, RoPA or data protection third party due diligence
- The candidate should have experience advising on data protection relevant contract provisions, and on international data transfers
- The candidate should be comfortable working in an unstructured & complex environment requiring out of box thinking, logical reasoning
- The candidate should be able to continuously add value to assigned processes and develop solutions
- Ability to learn and understand the EYs global policies as well as familiarity with other Legal and Risk Management initiatives outside of area of expertise




- Ability to manage tasks and activities in a timely manner and be responsible for specific outcomes
- Basic knowledge of project management tools and methodologies
- Ability to keep confidential sensitive information
- Strong research and communications skills
- Ability to successfully handle multiple tasks
- Interest in working with a culturally diverse team from around the globe to design, develop, and deploy programs and share knowledge
- Excellent relationship-building and interpersonal skills, with an inclusive approach
- Effective communicator with good written and oral presentation skills
- Team player and active listener with the ability to respond to and develop the ideas of others
- Experience working in an international setting and resolving cross border issues

To qualify for the role you must have

- Law graduate with practising certificate held for a jurisdiction in one of the GDS locations or a GDPR location
- Good academic background
- Candidates with a recognised data protection/data privacy qualification (e.g. CIPP/E or similar) or willingness to obtain the qualification in first six months with team would be preferred

Ideally, youll also have

- Ability to operate and flex in an ambiguous and changing environment to respond to emerging priorities
- Experience of working to deadlines and delivering high quality outputs
- Ability and willingness to periodically work flexibly e.g., participating in calls outside of standard office hours (early morning/late night) to support our global organization
- Proven track record of independently managing multiple stakeholders in a structured MNC

What we look for

Were looking for an experienced, high energy individual who embraces change and innovation in order to ensure that we can continue to deliver world-class initiatives in an ever-changing workplace.

📌 GDS Data Protection Counsel (Bengaluru)
🏢 EY
📍 Bengaluru