Senior Consultant, Cybersecurity, Privacy, TC, UKI

Senior Consultant, Cybersecurity, Privacy, TC, UKI

Location: London

Other locations: Anywhere in Country

Date: 28 Jan 2026

Requisition ID:

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Job Title: Senior Consultant - Data Protection

About EY: At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting edge security transformation programs and services.

Join us and build an exceptional experience for yourself, and a better working world for all.

The opportunity

As a Senior Consultant in Data Protection, you will take a key position in delivering EY's data protection services, supporting and managing engagements and client delivery. You will also be expected to play a supporting role in building EY's Data Protection Services, working with alliance partners and advising clients on current market trends.

Location - London, Manchester or Scotland

The role will see you providing specialist advice as part of a variety of teams - from discrete data protection and privacy focused activities across large multi disciplinary teams, to deliver privacy and cyber security transformation programmes.

Key Responsibilities

• Supporting end to end data protection programmes at a UK and global level from design through to build and implementation.
• Delivering discrete elements of programmes and projects.
• Conducting data protection maturity and gap assessments - this may include evaluation of the control landscape - data loss prevention, insider threat and information management solutions; user awareness and training.
• Data discovery programmes and data inventory management to meet regulatory and security requirements.
• Data Loss Prevention assessment, strategy and implementation programmes.
• Data governance and data ethics review, management and design.
• Design and configuration of specific technology solutions associated with data protection - e.g. Microsoft Purview, BigID, OneTrust.
• Privacy technology advisory and implementation activities.
• Data Classification, handling and operational engagements to support effective privacy and security strategies.
• Working with colleagues in the UK and globally to develop new and innovative compliance services, focusing on emerging legislation and technology as well as maturity of existing operations in specific industry propositions that solve client problems/issues and integrate with their overall IT delivery and support strategy.
• Opportunity to work across all aspects of Cyber, Technology and business solutions.
• Deliver engagements and build productive relationships with client stakeholders through project delivery.
• Contribute to articles and thought pieces.
• Work with prospective clients on the planning and delivery phase of engagements.
• Create high quality reports as part of a team, for review by engagement and project leaders.
• Work with senior practice leaders and market leaders in the creation of proposals and marketing material.

Skills and Attributes for Success

• Professional, quickly establishing personal credibility and demonstrating expertise.
• Good communicator with the ability to contribute assuredly to technical security and privacy discussions with peers.
• Team player who not only looks to enhance own career but recognises the value of teamwork, facilitating and encouraging collaboration among team members.
• Practical approach to solving issues and gaining client agreement.
• Analytical mindset to deliver insightful, practical and sustainable solutions.
• Confident and effective in recognising and managing potential issues during client assignments.
• Proactive identification of risks and issues that may impact delivery of day to day work.

Qualifications

• Professional experience within a consulting or professional services organisation operating within the Data Protection and privacy space, including the ability to understand, assess and deliver programmes and technical implementation of data protection tooling.
• Experience delivering data protection programmes across the areas of classification, Data Loss Prevention, CASB and data management - ranging from assessment to programme redesign and implementation.
• Experience working with others in the development and delivery of complex client solutions and/or proposition development.
• Good understanding of privacy processes and requirements, from governance and data subject rights through to data mapping, privacy operations and privacy risk management.
• Security and Privacy related qualifications such as CIPP/E, CIPP/M or vendor qualifications on DPP software including DLP, Classification solutions and data discovery platforms.
• Broader cybersecurity knowledge and skills across cyber domains including NIST, ISO 27001, cyber assessments, programmes and management.
• Experience with privacy/data management tooling such as TrustArc, OneTrust and BigID.
• Key delivery experience in the following disciplines: security assurance, third party management, DLP, Classification.
• Key sector experience in one or more of the following: Government & Public sector, Energy & Utilities, Retail and Consumer products, Life sciences, Telecoms, Media and Technology, Transport.

What We Look For

• Core consulting skills - advanced data and evidence management, client management on remediation programmes, driving innovation and continuous improvement.
• Proactive - a proactive individual who can get stuck in client delivery and support the broader practice and solutions.
• Technical skills - strong technical insight, practical knowledge and specialist capability.
• Versatility - proven ability to adapt and learn in an innovative environment.

Please note: The successful candidate must undergo and pass checks in line with SC (Security Check) clearance standards after joining EY. These checks may include, but are not limited to, verification of identity, right to work in the UK, employment history, proof of address and unspent criminal convictions. Candidates must be a UK national or have been a resident in the UK for a minimum of five years and ensure that they have not spent more than six months outside the UK.

What We Offer

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

• Continuous learning: You'll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We'll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You'll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It's yours to build.

Apply now.

TCCyberUKI2026

Cyber2026

EY Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

Choose how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.