Senior Consultant, Cybersecurity, Data Protection, TC, UKI
Location: London, Manchester, or Scotland. Other locations: Anywhere in the Country.
Date: 4 Mar 2026
Requisition ID: 1677311
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Join EY and help to build a better working world.
Job Title: Senior Consultant – Data Protection
About EY: At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting‑edge security transformation programs and services.
Join us and build an exceptional experience for yourself, and a better working world for all.
The opportunity: As a Senior Consultant in Data Protection you will take a key position in delivering EY’s data protection services, supporting and managing engagements and client delivery. You will also be expected to take a supporting role in building out EY’s Data Protection Services, working with alliance partners and advising clients on the current market trends.
Location - London, Manchester or Scotland
The role will see you providing specialist advice as part of a variety of teams—from discrete data protection and privacy focused activities across large multi‑disciplinary teams, to deliver privacy and cyber security transformation programmes.
Key Responsibilities
- Supporting end‑to‑end data protection programmes at a UK and global level from design through to build and implementation.
- Delivering discrete elements of programmes and projects.
- Conducting data protection maturity and gap assessments—including evaluation of the control landscape (data loss prevention/insider threat and information management solutions; user awareness and training).
- Data discovery programmes and data inventory management to meet regulatory and security requirements.
- Data Loss Prevention assessment, strategy and implementation programmes.
- Data governance and data ethics review, management and design.
- Design and configuration of specific technology solutions associated with data protection (e.g. Microsoft Purview, BigID, OneTrust).
- Privacy technology advisory and implementation activities.
- Data Classification, handling and operational engagements to support effective privacy and security strategies.
- Work with colleagues in the UK and globally to develop new and innovative compliance services focused on emerging legislation and technology, as well as maturity of existing operations in specific industry propositions that solve client problems/issues and integrate with their overall IT delivery and support strategy.
- Opportunity to work across all aspects of Cyber, Technology and business solutions.
- Deliver engagements and build productive relationships with client stakeholders through project delivery.
- Contribute to articles and thought pieces.
- Work with prospective clients on the planning and delivery phase of engagements.
- Create high‑quality reports as part of a team, for review by engagement and project leaders.
- Work with senior practice leaders and market leaders in the creation of proposals and marketing material.
Skills and Attributes for Success
- Be professional, quickly establishing personal credibility and demonstrating expertise.
- Be a good communicator with the ability to contribute assuredly to technical security and privacy discussions with peers.
- Be a team player who not only looks to enhance their own career but recognises the value of teamwork, facilitating and encouraging collaboration amongst team members.
- Take a practical approach to solving issues and gaining client agreement.
- Be able to analyse complex problems and deliver insightful, practical and sustainable solutions.
- Be confident and effective in recognising and managing potential issues during client assignments.
- Proactive identification of risks and issues that may impact delivery of day‑to‑day work.
Qualifications
- Professional experience within a consulting or professional services organisation operating within the Data Protection and privacy space, including the ability to understand, assess and deliver programmes and technical implementation of data protection tooling.
- Experience delivering data protection programmes across classification, Data Loss Prevention, CASB and data management—ranging from assessment to programme redesign and implementation.
- Experience working with others in the development and delivery of complex client solutions and/or proposition development.
- Good understanding of privacy processes and requirements, from governance and data subject rights through to data mapping, privacy operations and privacy risk management.
Ideal Additional Qualifications
- Security and Privacy relation qualifications such as CIPP/E, CIPP/M or vendor qualifications on DPP software including DLP, classification solutions and data discovery platforms.
- Broader cybersecurity knowledge and skills across cyber domains including NIST, ISO 27001, cyber assessments, programmes and management.
- Experience with privacy/data management tooling such as TrustArc, OneTrust and BigID.
- Key delivery experience in security assurance, third‑party management, DLP and classification.
- Key sector experience in Government & Public sector, Energy & Utilities, Retail and Consumer products, Life sciences, Telecoms, Media and Technology, Transport.
What We Look For
- Core consulting skills – advanced data and evidence management, client management on remediation programmes, driving innovation and continuous improvement.
- Proactive individual who can get involved in client delivery and support the broader practice and solutions.
- Technical skills – strong technical insight, practical knowledge and specialist capability.
- Versatility – proven ability to adapt and learn in an innovative environment.
Security clearance: The successful candidate must undergo and pass checks in line with SC (Security Check) clearance standards after joining EY. These checks may include, but are not limited to, verification of identity, right to work in the UK, employment history, proof of address and unspent criminal convictions. Candidates must be a UK national or have been a resident in the UK for a minimum of five years and ensure that they have not spent more than six months outside the UK.
What We Offer
- Competitive remuneration package, including a comprehensive Total Rewards package.
- Continuous learning opportunities.
- Success as defined by you—tools and flexibility to make a meaningful impact your way.
- Transformative leadership with insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture that embraces who you are.
EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client‑facing professionals may be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.
Apply now.
#J-18808-Ljbffr