Policy and Governance Analyst

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

We are strengthening the EY global approach to data risk governance, policy and capability. As a Supervising Associate within DSO, you will focus on Data Risk Governance, Policy, and Capability, supporting the development, implementation, and governance of data stewardship framework within EY, Policies, Standards, and capability-building initiatives.

Your Key Responsibilities

• Support the development, maintenance and governance of global data risk and data stewardship Policies, Standards and Guidance materials across the topics including- Classification frameworks, Synthetic Data, Data de-identification, Data Quality and Lineage, Metadata handling and other data governance and stewardship areas.
• Partner with cross-functional stakeholders (e.g., Risk Management, GCO, Data Office, EY Technology, and Service Lines) to drive consistent implementation and adoption of Policy requirements.
• Assist in creating global policy positions for strategic topics including data stewardship, data risk management, etc
• Maintain alignment with other existing policies, data risk standards, and guidance, ensuring frameworks, processes, and tools remain aligned to evolving requirements.
• Create standards, templates, and change control processes for governance frameworks, RACIs, compliance models, and reporting, aligned with DSO policies, standards, and the EY Global Compliance Framework.
• Support the development and continuous improvement of the global data risk framework through governance insights and risk, control, and accountability mappings.
• Contribute to the design and maintenance of testing methodologies, testing criteria, control matrices, and standards validation activities.
• Ensure the framework is embedded within DSO delivery processes, including project charters, playbooks, and design authority checkpoints, enabling consistent use and maintenance of governance models across initiatives.
• Embed key risk topics—including AI data governance, responsible data use, synthetic data, and data stewardship practices—into capability-building initiatives to strengthen control effectiveness and audit readiness.
• Partner with AI and Innovation learning owners to integrate data risk controls, governance requirements, and expected behaviours into learning journeys (e.g., Responsible AI, data governance for model training, synthetic data guardrails).
• Develop leadership presentations, toolkits, templates, assessments, thought leadership content, decision-support materials, and AI-enabled solutions to promote awareness, engagement, and informed decision-making.
• Create digital learning and enablement experiences, including HTML-based content and user experiences informed by UI/UX principles.
• Ensure learning products reflect DSO policies, standards, and guidance and are managed through a controlled lifecycle, including versioning, periodic review, and retirement.
• Assist in creation of a roadmap, governance, operations, and continuous improvement of DSO global tools supporting data retention, classification, minimization, archiving, disposition, and secure handling of EY Information.
• Identify opportunities for automation, embedded workflows, and platform integrations that materially reduce risk, improve compliance, or increase operational efficiency. Develop and enhance AI-enabled tools and workflow automations that support governance, stewardship, and policy adoption objectives.

What We Look For

• Deep knowledge and experience in data risk/governance, DP&C and/or AI data governance
• Global framework design across risk/controls/assurance; harmonisation experience
• Strong subject matter grounding in data governance, policies, standards, data risks, responsible AI or data protection.
• Strong grounding in data risk, data protection & confidentiality, data governance, and AI data governance; able to translate policy into testable controls.
• Bachelor’s degree (or equivalent experience) in learning, education, data/technology, risk, or related disciplines.
• Relevant certifications in governance/enablement and/or data risk/privacy (e.g., CIPP/E, CIPT, CDPSE) are advantageous but not mandatory.
• Contribute to initiatives relating to AI governance, responsible data use and emerging data risk topics.
• Strong stakeholder management skills and experience working across matrixed environments.
• Strong analytical capabilities with the ability to support governance, compliance and reporting activities.
• Excellent written and verbal communication skills with strong attention to detail.<