Data Risk Controls Analyst

Location: Katowice, Wroclaw- 2 days office/3 days remote

Area/Regional Data Risk Controls Analyst

Let us introduce you the job offer by EY GDS Poland - a member of the global integrated service delivery center network by EY.

Today’s world is fuelled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of over 950 people who collaborate to support the business of EY by protecting EY and client information assets. Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust.

Within Information Security we blend risk strategy, digital identity, cyber defence, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value.

The opportunity

The Area/Regional Data Risk Controls Analyst will support the implementation and adoption of EY’s data protection strategy within an assigned geographic area or region. The role will help deploy and operationalise data protection controls, including controls that mitigate data exfiltration risk, while ensuring regional business requirements, regulatory considerations and operational realities are appropriately addressed.

Working with Information Security, technology teams and business stakeholders, the analyst will help translate global requirements into practical regional implementation, track progress and remediation, coordinate stakeholder activity and support the consistent adoption of data protection controls.

Your key responsibilities

Control deployment and regional implementation:

• Support the deployment, adaptation and operational management of data protection controls across the assigned area or region.
• Translate global requirements into practical regional implementation steps that reflect local business, regulatory and operational needs.
• Coordinate with Information Security teams, technology teams, product owners and business stakeholders to support implementation and resolve delivery issues.
• Support Dataguard and related data protection activities while remaining adaptable to the broader Data Risk Controls portfolio.

Risk management, remediation and reporting:

• Track implementation progress, remediation actions, risk mitigation plans, dependencies and key programme milestones.
• Support the identification, assessment, escalation and resolution of data protection risks and control issues.
• Maintain clear and accurate reporting on implementation status, risks, decisions and follow-up actions for regional and global stakeholders.
• Help ensure remediation activities are executed consistently and issues are progressed to appropriate owners.

Stakeholder coordination and adoption:

• Act as a liaison between global programme teams and regional stakeholders for control deployment and adoption.
• Serve as a regional point of contact for implementation requirements, operational questions and stakeholder follow-up.
• Support communications, education and awareness activities that improve understanding and adoption of data protection requirements.
• Build effective working relationships across geographies and organisational boundaries.

Skills and attributes for success

• Practical understanding of technology risk, information security, data protection and internal controls.
• Ability to coordinate multiple activities, manage dependencies and meet deadlines in a fast-paced and changing environment.
• Strong written communication, presentation and stakeholder engagement skills.
• Demonstrated collaboration, negotiation and influencing skills.
• Ability to connect technical controls, business requirements and risk outcomes in clear, practical language.
• Strong attention to detail in tracking actions, reporting status and maintaining supporting information.

To qualify for the role you must have

• Demonstrated experience in Technology Risk Management, Information Security, Governance, Risk and Compliance, data protection or a related discipline.
• A degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
• Working knowledge of recognised policy and control frameworks, such as ISO or COBIT.
• Strong English language skills, including writing, presentation, interpersonal and communication capabilities.
• Experience coordinating stakeholders, tracking remediation activity and supporting the implementation of risk or control initiatives.
• Ability to work effectively in a globally distributed team and engage stakeholders across different levels of the organisation.

Ideally, you’ll also have

• A relevant certification, such as CRISC, CISM, CISA or CISSP, or progress towards an equivalent qualification.
• Experience supporting data protection, data loss prevention, control deployment or technology risk remediation initiatives.
• Awareness of external risk trends, data protection requirements and business standards.
• An understanding of EY business and Service Line risk priorities.

What we look for

We seek a highly organised and collaborative professional who can coordinate security and risk activities, engage stakeholders and support consistent execution across a region. The ideal candidate combines sound judgement, strong programme coordination and communication skills, and practical experience in technology risk or information security. The person will be comfortable translating global requirements into measurable regional actions and following those actions through to completion.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations - Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom - and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.