Senior Cyber Security Consultant

Job Summary

The opportunity: Senior Consultant-National-Tech Consulting-CNS - TC - Cyber Security - New Delhi.

National comprises of sector agnostic teams working across industries for a well rounded experience.

CNS - TC - Cyber Security:

EY Consulting is transforming businesses through the power of people, technology and innovation. Our client-centric approach focuses on driving long-term value for our clients by solving their most strategic problems. EY Consulting is made up of three sub-service lines: Business Consulting (including Performance Improvement and Risk Consulting), Technology Consulting and People Advisory Services.

Responsibilities

• Responsible for delivering privacy, data protection, and data governance engagements.
• The role combines deep regulatory knowledge with practical consulting execution, helping clients design, implement, assess, and operationalize privacy programs aligned with global regulations (e.g., GDPR, DPDP Act, CCPA) and business strategy.
• Engagement Delivery Lead end-to-end delivery of data privacy and data protection consulting engagements, including assessments, program design, implementation, and remediation.
• Advise clients on global and regional privacy regulations, including: GDPR, UK GDPR, Digital Personal Data Protection Act (DPDPA), CCPA/CPRA; Other sector-specific or cross-border data protection requirements.
• Conduct privacy maturity assessments, gap analyses, and risk assessments.
• Design and operationalize: Privacy frameworks and target operating models; Policies, standards, procedures, and playbooks; Consent management, data subject rights (DSR) processes, and breach response workflows; Support clients with privacy by design/default integration into business processes, technology platforms, and product development.
• Risk, Compliance & Governance - Perform and review Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs) and Legitimate Interest Assessments (LIAs). Advise on cross-border data transfer mechanisms (SCCs, BCRs, adequacy, localization requirements). Support the establishment or enhancement of privacy governance structures, including: Privacy offices and operating committees; Data ownership and accountability models.
• Technology & Data Enablement - Strong experience in PMT/PET implementation. Integrate privacy controls into data platforms, cloud environments, and enterprise systems. Assess and advise on privacy tooling (data discovery, consent, DSR orchestration, risk management tools). Translate legal and regulatory requirements into practical technology and process controls.
• Thought Leadership - Contribute to proposal development, RFP responses. Develop and deliver client presentations. Stay current with evolving privacy laws, enforcement trends, and market practices, translating insights into consulting offerings.
• Professional Experience - 4-5 years of relevant experience in: Consulting, or professional services. Proven experience managing multiple client engagements simultaneously. Hands-on experience delivering practical, implementable privacy solutions (not purely theoretical or legal).
• Certifications (preferred) - CIPP/E, CIPP/A, CIPM, or CIPT; ISO 27701 Lead Implementer/Auditor.

Skills and qualifications To qualify for the role you must have

• Bachelors Information Technology, Computer Science, degree in Law or related field
• Masters degree preferred (e.g., M. TECH, LLM, MBA in Information Security)

Experience

• Data Privacy and Cybersecurity (4+ years)

What we look for

People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.