Senior Data Protection Professional

Job Title: Senior Data Privacy ManagerWe are seeking a seasoned data privacy expert to join our organization. This is an exceptional opportunity for a highly motivated and experienced individual to lead our data protection strategy, drive organizational security objectives, and ensure compliance with relevant regulations.The ideal candidate will have a strong background in data protection strategy, governance, DLP, data encryption, anonymization, and database security. They will be responsible for developing and implementing advanced DLP policies, standards, and incident response frameworks. Additionally, they will oversee data discovery, data flow mappings, and lifecycle management, as well as implement strong key generation, rotation, masking, and encryption protocols.Responsibilities:Develop and Implement Data Protection Strategy: Develop, implement, and continuously enhance the organization's data protection strategy and framework.Drive Organizational Security Objectives: Support the head of data privacy & protection in driving organization-wide security objectives.Ensure Compliance: Ensure policy compliance with a data-driven, risk-based approach.Lead Enterprise Encryption Initiatives: Lead enterprise encryption initiatives for data at rest, in transit, and in use.Design and Implement Anonymization/Masking Solutions: Design and implement anonymization/masking solutions for PII, PCI, and sensitive data.Define Encryption and Key Management Standards: Define encryption and key management standards, governance models, and vendor integrations.Develop and Maintain Advanced DLP Policies: Develop and maintain advanced DLP policies, standards, and incident response frameworks.Conduct Audits and Monitor KPIs/KRIs: Conduct audits, monitor KPIs/KRIs, and improve secure data-handling practices across the organization.Coordinate with GSOC, Legal, IT, and Compliance: Coordinate with GSOC, legal, IT, and compliance to mitigate data leakage risks.Oversee Data Discovery, Data Flow Mappings, and Lifecycle Management: Oversee data discovery, data flow mappings, and lifecycle management.Implement Strong Key Generation, Rotation, Masking, and Encryption Protocols: Implement strong key generation, rotation, masking, and encryption protocols.Drive Adoption of Security Frameworks: Drive adoption of security frameworks such as ISO 27001, NIST, PDPL, PCIDSS.Required Skills and Qualifications:Core Expertise: Proven experience in data protection strategy, governance, DLP, data encryption, anonymization, and database security.Professional Certifications: Minimum 2 required certifications (CIPPe / CIPM / CIPT, CDPSE, CISA / CISM / CISSP, PCI-QSA, SABSA).Experience: 12+ years total experience in cybersecurity, data protection, privacy, or security governance, and minimum 4 years in compliance, risk, legal, audit, or data protection implementation roles within a large bank or financial institution.Technical Competencies: DLP technologies (e.g., Symantec, Forcepoint, Microsoft Purview), encryption & key management solutions (KMS, HSM, Tokenization), DAM platforms (IBM Guardium / Imperva / others), ISO 27001, NIST CSF, PCI-DSS, PDPL, Privacy Regulations, and strong understanding of incident response, root cause analysis, and remediation planning.Benefits:A T-shaped Data Protection Leader: A T-shaped data protection leader with both deep technical expertise and wide cross-functional understanding.Complex Problem Solving: Ability to solve complex problems, drive automation, and introduce innovative security solutions.Strong Communication Skills: Strong communication skills for engaging with senior leadership and regulatory bodies.Demonstrated Impact: Demonstrated impact in enhancing data protection posture and reducing enterprise risk.Others:This is a fantastic opportunity to make a significant impact on our organization's data protection strategy and drive innovation in the field of data protection.],