Director, Data Security

Job title: Director, Data Security

Department: Attack Surface Management (Cyber Hygiene and Data)

Level: Director

Reports to: Managing Director, CISO US Services

Location: New Jersey

Compensation: $225,000 - 235,000 base salary + variable compensation + 401(k) match + benefits

What you will be doing: Establish, build, and lead the new Data Security team, ensuring it has an effective operating model, processes, roles, and responsibilities. Identify data security trends, risks and threats and work directly with IT security and wider business leaders to address these. Direct the development and continuous improvement of the overall data security strategy and framework within CLS, including defining the strategic direction for (non-exhaustive list):Data Loss Prevention, Data-at-Rest / In-transit controls, E-mail security, Masking & Tokenization, Data Discovery and Classification, Secrets Scanning & Management, and Third Party Data Management. Work closely with operational support teams with regards to the operation and implementation of the above strategic priorities. Work closely with Security Architecture with regards architecture, design and engineering of Data Security services and solutions. Establish and supporting governance, processes, and policies to protect CLS critical information & assets. Oversee the implementation and management of enterprise data protection controls to include supporting the development of key metrics. Oversee the support of data training programes, liaising with the Training and Awareness team to educate staff on data security policies, best practices, and tooling to promote secure data handling behaviors and minimize risks. Liaise extensively with required internal stakeholders and Third Party vendors, with direct responsibility for the management of specific vendors providing services to Data Security.

What we’re looking for: A security leader who can:

• Lead the Data Security team, driving innovation and ensuring the team has a clear understanding of its roles and responsibilities, and how they contribute and align to CLS’s overall IT Security Function.
• Liaise closely with CLS stakeholders e.g. Wider IT security Teams, Legal, Privacy / Data Protection etc.
• Demonstrate experience in complementary tools and solutions to secure enterprise-wide data security within CLS.Identify Data Security priorities to establish and strengthen a robust security team, by focusing efforts on tailoring work and programs for CLS specific needs.
• Work with and have experience of managing relationships with key third party suppliers in support of data security priorities Professional qualifications / certifications
• Experience in data security or information security (12 – 15 years), including ~8-10 years in a leadership or management role overseeing data security functions.
• Experience in:
• Leading team adherence to operational and compliance standards within highly regulated environments.
• Reporting on team performance and project progress to senior management, translating technical insights.
• Representing the team in governance forums or committees, providing expert input and driving outcomes.
• Understand, interpret and apply regulatory requirements, compliance and industry standards as pertains to Data Security.