Chief Data Protection Strategist

Senior Data Protection LeadWe are seeking a seasoned professional to lead our organization's data protection strategy and framework.This role involves developing, implementing, and enhancing the Bank's Data Protection Strategy and Framework.The successful candidate will support the Head of Data Privacy & Protection in driving organization-wide security objectives.Policies will be enforced with a data-driven, risk-based approach.Data Encryption & Anonymization Key Roles:Lead enterprise encryption initiatives for data at rest, in transit, and in use.Anonymization/masking solutions will be designed and implemented for PII, PCI, and sensitive data.Encryption and key management standards, governance models, and vendor integrations will be defined.Data Loss Prevention (DLP) Key Responsibilities:Advanced DLP policies, standards, and IR frameworks will be developed and maintained.Audits will be conducted, KPIs/KRIs will be monitored, and secure data-handling practices will be improved across the organization.Coordinated efforts with GSOC, Legal, IT, and Compliance will mitigate data leakage risks.Data Security Posture Management Roles and Responsibilities:Data discovery, data flow mappings, and lifecycle management will be overseen.Strong key generation, rotation, masking, and encryption protocols will be implemented.Security frameworks such as ISO 27001, NIST CSF, PCI-DSS, PDPL, Privacy Regulations will be driven.Database Activity Monitoring (DAM) Daily Operations:Daily DAM operations, dashboards, incident analysis, and system tuning will be managed.Risk assessments will be conducted, mitigation actions will be recommended, and secure DB configurations will be ensured.Enterprise Data Protection Programs Key Initiatives:Insider Risk Management, Data Retention/Deletion, Backup Protection, Data Discovery, and Risk Assessments will be led.Continuous improvement in Data Protection maturity will be driven.Executive leadership, Steering Committees, and regulatory bodies will be engaged.Leadership & Collaboration Required Skills and Qualifications:Proven experience in Data Protection Strategy, Governance, DLP, Data Encryption, Anonymization, Data Security Architecture, and Database Security is required.Strong experience in financial services or large enterprise environments is necessary.Professional Certifications Minimum 2 Required:CIPPe / CIPM / CIPT certifications are preferred.CDPSE, CISA / CISM / CISSP, PCI-QSA, SABSA certifications are also valuable.Experience Total Experience in Cybersecurity, Data Protection, Privacy, or Security Governance:12+ years total experience in cybersecurity, data protection, privacy, or security governance is desired.Minimum 4 years in compliance, risk, legal, audit, or data protection implementation roles within a large bank or financial institution is needed.Technical Competencies Desired Technical Skills:DLP technologies such as Symantec, Forcepoint, Microsoft Purview are required.Encryption & Key Management solutions like KMS, HSM, Tokenization are also necessary.DAM platforms including IBM Guardium / Imperva / others are beneficial.ISO 27001, NIST CSF, PCI-DSS, PDPL, Privacy Regulations knowledge is essential.Strong understanding of incident response, root cause analysis, and remediation planning is expected.Bonus Points for:T-shaped data protection leader with both deep technical expertise and wide cross-functional understanding.Ability to solve complex problems, drive automation, and introduce innovative security solutions.Strong communication skills for engaging with senior leadership and regulatory bodies.Demonstrated impact in enhancing data protection posture and reducing enterprise risk.