Sr Manager, IT Cybersecurity Data Protection

Own the strategy and engineering direction for enterprise data protection and privacy by design across platforms, applications, and AI solutions.

Responsibilities

• Lead the enterprise Data Protection and Privacy Technology strategy and roadmap, ensuring continuous improvement of controls including data classification, encryption, access governance, DLP, masking, and AI/ML safeguards.
• Build expertise in enterprise data flows, promoting secure data handling and shared accountability while aligning protection and privacy decisions to business priorities and technology strategies.
• Make guidance-driven decisions with limited direction from business or portfolio leadership by balancing data protection, privacy, risk appetite, and operational realities.
• Provide oversight and direction for product capabilities, programs, services, and engagement model for data protection and privacy technologies; govern adherence to policies and standards; own and enhance the global operating model.
• Translate complex privacy and data protection requirements into actionable guidance for senior leaders, technology teams, and business partners.
• Shape how data protection and privacy controls are integrated into new technology development to mitigate risks early and effectively.
• Act as a bridge across engineering, cybersecurity, privacy, and business teams to embed data protection and privacy by design into platforms, applications, and AI solutions.
• Measure technology effectiveness using KPIs, telemetry, and operational metrics to drive maturity, automation, and risk reduction.
• Conduct and oversee risk assessments, product evaluations, compliance checks, and audits for data protection and privacy to meet regulatory requirements.
• Coordinate with appropriate teams during data protection and privacy incidents to ensure accurate reporting, communication, and follow-through.
• Lead data protection and privacy awareness programs to improve end user understanding of responsibilities and emerging threats.
• Serve as the primary point of contact between business or portfolio executive leadership and product teams, engaging executives and communicating progress of programs and services.
• Build and lead global teams of data protection engineers, privacy engineers, and analysts to strengthen technical excellence, continuous learning, and innovation.
• Oversee a team of up to 50 team members across multiple squads.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical field.
• 8+ years of progressive experience in cybersecurity, data protection, privacy engineering, or information security.
• 3+ years leading technical teams in a large enterprise environment.
• Experience driving large-scale security or privacy technology initiatives from strategy through execution.
• Proven ability to collaborate across cybersecurity, legal, data, product, and engineering to embed privacy and security into systems and workflows.
• Advanced communication skills to explain data protection and privacy concepts clearly to non-technical audiences and convert complex requirements into practical guidance.
• Master’s degree in computer science, Cybersecurity, Engineering, Information Assurance, or a related technical field.
• 12+ years of experience in cybersecurity, privacy engineering, data protection, or information security.
• 5+ years leadership or management experience overseeing technical teams and driving enterprise-level initiatives.
• Experience leading data protection or privacy engineering programs and teams in highly regulated industries (e.g., aviation, financial services, healthcare).
• Knowledge of data protection industry practices and global privacy regulations including GDPR and CCPA/CPRA and PCI, with the ability to translate them into technical controls aligned to NIST CSF/PRMF and ISO/IEC 27001/27701.
• Strong understanding of data security and privacy engineering, secure data lifecycle practices, and access control models.
• Familiarity with cybersecurity or privacy-related risk assessment methodologies and frameworks.
• Professional certifications such as CISSP, CIPP/E, CIPP/US, CIPT, CDPSE, CCSP, or equivalent privacy/security credentials.
• Demonstrated ability to deliver prioritized outcomes using agile and product management principles.
• Hands-on experience implementing and managing data protection and privacy technologies including DLP, data discovery/classification, encryption/tokenization, access governance, cloud data security, data and code scanning tools, DSAR/rights automation platforms, and consent and preference management tools.
• Experience using KPIs, operational telemetry, and maturity metrics to evaluate data protection and privacy by design controls.
• Demonstrated leadership and stakeholder influence skills across all levels, plus relationship building and communication strengths.
• Excellent analytical and problem-solving abilities with attention to detail; solution-oriented approach to define pragmatic alternatives that support cybersecurity outcomes.
• Ability to work independently with initiative.

Technologies

• GDPR
• CCPA/CPRA
• PCI
• NIST CSF
• NIST PRMF
• ISO/IEC 27001
• ISO/IEC 27701
• DLP
• Encryption
• Tokenization
• Masking
• AI/ML safeguards
• Data discovery/classification
• Access governance
• Cloud data security
• Data and code scanning tools
• DSAR/rights automation platforms
• Consent and preference management tools
• CISSP
• CIPP/E
• CIPP/US
• CIPT
• CDPSE
• CCSP

Benefits

• Travel perks
• Health benefits (health, dental, prescription and vision); virtual doctor visits; flexible spending accounts
• Wellness programs
• 401(k) program
• Additional benefits including Employee Assistance Program, pet insurance, and discounts on hotels, cars, cruises and more