The opportunity

The Area/Regional Data Risk Controls Analyst will support the implementation and adoption of EY’s data protection strategy within an assigned geographic area or region. The role will help deploy and operationalise data protection controls, including controls that mitigate data exfiltration risk, while ensuring regional business requirements, regulatory considerations and operational realities are appropriately addressed.

Working with Information Security, technology teams and business stakeholders, the analyst will help translate global requirements into practical regional implementation, track progress and remediation, coordinate stakeholder activity and support the consistent adoption of data protection controls.

Your key responsibilities

Control deployment and regional implementation

- Support the deployment, adaptation and operational management of data protection controls across the assigned area or region.
- Translate integral requirements into practical regional implementation steps that reflect local business, regulatory and operational needs.
- Coordinate with Information Security teams, technology teams, product owners and business stakeholders to support implementation and resolve delivery issues.
- Support Dataguard and related data protection activities while remaining adaptable to the broader Data Risk Controls portfolio.

Risk management, remediation and reporting

- Track implementation progress, remediation actions, risk mitigation plans, dependencies and key programme milestones.
- Support the identification, assessment, escalation and resolution of data protection risks and control issues.
- Maintain clear and accurate reporting on implementation status, risks,



decisions and follow-up actions for regional and global stakeholders.
- Help ensure remediation activities are executed consistently and issues are progressed to appropriate owners.

Stakeholder coordination and adoption

- Act as a liaison between global programme teams and regional stakeholders for control deployment and adoption.
- Serve as a regional point of contact for implementation requirements, operational questions and stakeholder follow-up.
- Support communications, education and awareness activities that improve understanding and adoption of data protection requirements.
- Build effective working relationships across geographies and organisational boundaries.

Skills and attributes for success

- Practical understanding of technology risk, information security, data protection and internal controls.
- Ability to coordinate multiple activities, manage dependencies and meet deadlines in a fast-paced and changing environment.
- Strong written communication, presentation and stakeholder engagement skills.
- Demonstrated collaboration, negotiation and influencing skills.
- Ability to connect technical controls, business requirements and risk outcomes in clear, practical language.
- Strong attention to detail in tracking actions, reporting status and maintaining supporting information.





To qualify for the role you must have

- Demonstrated experience in Technology Risk Management, Information Security, Governance, Risk and Compliance, data protection or a related discipline.
- A degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
- Working knowledge of recognised policy and control frameworks, such as ISO or COBIT.
- Strong English language skills, including writing, presentation, interpersonal and communication capabilities.
- Experience coordinating stakeholders, tracking remediation activity and supporting the implementation of risk or control initiatives.
- Ability to work effectively in a globally distributed team and engage stakeholders across different levels of the organisation.

Ideally, you’ll also have

- A relevant certification, such as CRISC, CISM, CISA or CISSP, or progress towards an equivalent qualification.
- Experience supporting data protection, data loss prevention, control deployment or technology risk remediation initiatives.
- Awareness of external risk trends, data protection requirements and business standards.
- An understanding of EY business and Service Line risk priorities.

What we look for

We seek a highly organised and collaborative professional who can coordinate security and risk activities, engage stakeholders and support consistent execution across a region. The ideal candidate combines sound judgement, strong programme coordination and communication skills, and practical experience in technology risk or information security. The person will be comfortable translating integral r

📌 Risk Analyst (Tandil)
🏢 EY
📍 Tandil