Data Protection - Manager - Information Security

We are seeking an experienced candidate for managing Data Loss Prevention (DLP) solutions, creating and maintaining data flow diagrams, and ensuring compliance with data protection regulations.

This role requires a seasoned professional with extensive experience in safeguarding sensitive data across systems, networks, and workflows while providing strategic direction for data protection initiatives.

Key Responsibilities:

1. Data Protection Program Management
   • Develop and implement a comprehensive data protection strategy, covering DLP, data classification, encryption, and other controls.
   • Oversee the deployment, configuration, and maintenance of DLP tools and technologies.
   • Establish and maintain policies, standards, and procedures to protect sensitive data.
   • Provide regular reporting on DLP metrics and trends to leadership.
2. Data Flow Management
   • Collaborate with business and technical teams to map and document data flows, ensuring accuracy and completeness.
   • Identify sensitive data repositories and flows, assessing risks associated with their storage, processing, and transmission.
3. Incident Management and Risk Mitigation
   • Lead investigations into data protection incidents, including data breaches and unauthorized access events.
   • Establish and maintain an incident response plan for data protection-related events.
   • Work with IT and business units to implement encryption, masking, and other data security measures.
4. Program Management
   • Lead security program initiatives, ensuring projects are delivered on time, within scope, and within budget.
   • Collaborate with cross-functional teams to integrate security into business processes and technology initiatives.
   • Establish and track key performance indicators (KPIs) to measure the effectiveness of security programs.
   • Provide regular updates to the CISO and executive leadership on program status, challenges, and achievements.

Qualifications:

• Bachelors degree in Computer Science or Information Security or related field
• Minimum of 8 years of experience in information security, with a focus on Data Protection, DLP/CASB/ MDM implementation & Management, etc.
• Expertise in DLP tools.
• Knowledge of data encryption, tokenization, and data classification technologies
• Strong understanding of data flow diagramming and risk analysis techniques.
• Proven leadership and team management skills.
• Excellent verbal and written communication skills with attention to detail
• Strong project management skills
• Effectively manage sensitive and confidential information

Preferred Skills:

• Experience in the e-commerce industry.
• Familiarity with security solutions such as Microsoft Defender & Purview, Netskope
• Strong analytical and problem-solving abilities.

Skills Required -

• 8+ years of experience in the field of information security.
• Strong technical expertise in DLP, encryption, and data classification methodologies