Cybersecurity - Data Protection - Senior Consultant

The opportunity

EY Canada's Cybersecurity practice is seeking an experienced and motivated Senior Consultant, Data Protection to support the delivery of data protection, information governance, privacy, and Microsoft Purview engagements across a variety of industries.

As a key member of our team, you will collaborate with clients to understand their data protection challenges, facilitate workshops, develop strategic and technical deliverables, manage project activities, and support the implementation of data security capabilities. You will work closely with business stakeholders, security teams, privacy professionals, records management teams, and technology leaders to deliver practical solutions that protect sensitive information while enabling business objectives.

This is a client-facing role that combines business analysis, project management, stakeholder engagement, and technical consulting.

This position falls within our Consulting practice, which helps our clients enhance the effectiveness of operations functions by assisting them as they shift their emphasis from transaction-level control, processing and reporting to more value driven, decision support and analytics.

This job posting relates to an existing vacancy within our organization.

Your key responsibilities

Client Delivery

• Lead business and technical workshops to gather requirements, understand current-state processes, identify risks, and document future-state requirements.
• Facilitate stakeholder discussions across Information Security, Privacy, Legal, Records Management, Compliance, Risk, and Technology teams.
• Support current-state assessments, maturity assessments, gap analyses, and roadmap development activities.
• Develop client deliverables including:
• Current-State Assessment Reports
• Business

Requirements

• Documents

• Technical Solution Design Documents

• Data Classification Standards

• DLP Use Case Catalogues

• Governance Frameworks and Operating Models

• Roadmaps and Implementation Plans

• Executive Presentations and Status Reports

• Conduct documentation reviews and analysis of data governance, information management, privacy, security, and compliance processes.

• Assist in the design and implementation of Microsoft Purview capabilities including Data Loss Prevention (DLP), Data Classification, Sensitivity Labels, Records Management, Data Lifecycle Management, and Insider Risk Management.

• Coordinate testing, pilot activities, user acceptance validation, and deployment readiness activities.

• Project Management & Coordination

• Support the day-to-day management of project activities, timelines, dependencies, risks, issues, and action items.

• Develop and maintain project plans, RAID logs, status reports, meeting minutes, and executive updates.

• Coordinate workshops, working sessions, steering committees, and project governance meetings.

• Track deliverables and project milestones to support successful project execution.

• Manage stakeholder communications and follow-up activities across multiple workstreams.

• Support change management, communications, training, and transition-to-operations activities.

• Data Protection & Governance Advisory

• Support clients in developing and operationalizing data protection programs.

• Assist with the development of:

• Data Governance Frameworks

• Data Classification Programs

• Data Loss Prevention (DLP) Programs

• Retention and Records Management Programs

• Data Protection Operating Models

• Privacy and Regulatory Compliance Assessments

• Analyze business processes and identify opportunities to enhance protection of sensitive information.

• Evaluate regulatory, privacy, and compliance requirements and translate them into business and technical requirements.

• Practice Development

• Contribute to proposals, statements of work, estimates, and client presentations.

• Support development of EY data protection methodologies, accelerators, templates, and reusable assets.

• Participate in internal knowledge-sharing and capability-building initiatives.

• Mentor junior team members and contribute to team development.

To qualify for the role, you must have:

• 3-7 years of experience in cybersecurity, data protection, privacy, information governance, compliance, or a related field.

• Experience leading workshops and gathering business and technical requirements.

• Experience developing professional client-facing documentation and presentations.

• Experience managing project activities and coordinating multiple stakeholders.

• Knowledge of one or more of the following:

• Strong analytical, organizational, and problem-solving skills.

• Excellent verbal and written communication skills.

• Ability to communicate effectively with both technical and non-technical stakeholders.

• Strong Microsoft Office skills, particularly PowerPoint, Word, Excel, and Teams.

• Bachelor's degree in Cybersecurity, Information Technology, Information Management, Business, Risk Management, or a related discipline.

• Ideally, You’ll Also Have

• Experience working within a consulting environment.

• Experience supporting Microsoft Purview implementations.

• Familiarity with privacy and regulatory frameworks (PIPEDA, GDPR, HIPAA, HIA, NIST, ISO 27001).

• Professional certifications such as:

• SC-400

• SC-900

• CDPSE

• PMP

• What we look for

• We’re looking for highly motivated professionals who are passionate about helping organizations protect sensitive information and manage risk. The ideal candidate is organized, detail-oriented, comfortable working with senior stakeholders, and enjoys translating complex business and technical requirements into actionable solutions.

• You are equally comfortable facilitating a workshop, creating executive presentations, documenting requirements, coordinating project activities, and contributing to solution design.

• Diversity and Inclusion at EY

• Diversity and inclusiveness are at the heart of who we are and how we work. We’re committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. From our actions to combat systemic racism and our advocacy for the LGBT+ community to our innovative Neurodiversity Centre of Excellence and Accessibility initiatives, we welcome and embrace the diverse experiences, abilities, backgrounds and perspectives that make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

• Learn about our commitment to Inclusiveness at https://www.ey.com/en_ca/about-us/corporate-responsibility/equity

• What working at EY offers

• At EY, our Total Rewards package supports our commitment to creating a leading people culture - built on high-performance teaming - where everyone can achieve their potential and contribute to building a better working world for our people, our clients and our communities. It’s one of the many reasons we repeatedly win awards for being a great place to work.

• We offer a competitive compensation package where you