Supervising Associate, Privacy and Data Protection (12-month contract)

Location: Toronto

Other locations: Primary Location Only

Date: Oct 22, 2026

Requisition ID: 1755379

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The Opportunity

The risks in today’s disruptive environment are increasingly multifaceted and evolve faster than ever before. We’re continuously evolving the ways we proactively manage risk to address the risk environment of tomorrow. EY Canada’s Risk Management (RM) function is responsible for the management of a variety of risks associated with regulation, data protection, records and information management, client and engagement acceptance, conflicts, and independence.

Our highly engaged team is looking to hire a privacy professional to join our privacy and data protection team. As an integral part of this team, this individual will be directly involved with policies, processes and procedures to maintain the Firm’s compliance with applicable privacy laws and related policies and guidance. This individual will also serve as a role model by promoting and demonstrating commitment to risk management processes and policies within the Firm.

This job posting relates to an existing vacancy within our organization.

Key responsibilities

- Support and promote compliance with EY policies and processes related to privacy and data protection
- Support with data protection activities, such as data incident management, privacy impact assessments,



records of processing activities, data loss prevention, client questionnaires, and responding to RFPs
- Individual will be required to understand and interpret relevant policies and guidance and to consistently provide risk-appropriate advice to EY professionals
- Provide direct support to EY Canada’s Privacy and Data Protection Leader and the team
- Work with EY service lines and functions, other EY member firms, EY Global, and local stakeholders to advance the privacy and data protection program.
- Support training and awareness campaigns.

Skills and attributes for success:

- Strong analytical and problem-solving skills, with the ability to exercise sound judgment when assessing privacy and data protection risks.
- Ability to understand and interpret policies, regulatory requirements and guidance, and provide practical, risk-appropriate advice to stakeholders.
- Strong organizational and time-management skills, with the ability to manage multiple priorities and changing deadlines while maintaining accuracy and attention to detail.
- Excellent written and verbal communication skills, with a strong client-service mindset.
- Strong interpersonal and collaboration skills,



with the ability to work effectively with multidisciplinary teams and stakeholders across the organization.
- Ability to work effectively in a fast-paced, deadline-driven environment while handling sensitive and confidential information.
- Adaptability and flexibility to respond to an evolving privacy and regulatory landscape.

To qualify for the role, you must have

- A minimum of three years of experience in a privacy or data protection function, including hands-on experience with activities such as privacy impact assessments, records of processing activities and privacy incident management.
- Knowledge of Canadian federal and provincial privacy laws and regulatory requirements including Bill C-27 and Law 25 in Quebec. Knowledge of CASL, GDPR and California privacy requirements would be considered an asset.
- Familiarity with technology and data architecture concepts relevant to privacy and data protection, including databases, cloud storage and data flows.
- Knowledge and understanding of risk management and compliance principles, with experience interpreting policies and providing related guidance.
- Project management experience or demonstrated experience managing privacy, compliance or risk-related initiatives.
- Understanding of client service and the ability to work effectively with business stakeholders.
- Knowledge of, or experience working within, a multidisciplinary skilled services environment would be an asset.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. Plus, we offer:

- Support and coaching from some o

📌 Supervising Associate, Privacy and Data Protection (Canada)
🏢 EY
📍 Canada