Data Protection and Data Risk Management Lead

Data Protection and Data Risk Management Lead

• Location: New York, NY
• Working Pattern: Hybrid, 3 days onsite
• Employment: Full time

We are working with a large financial services organization that is continuing to invest in its data, technology and governance capabilities.

They are looking for an experienced Data Protection and Data Risk Management Lead to take ownership of initiatives focused on protecting sensitive data and improving how data risk is identified, measured and managed across the business.

This is a senior, hands on leadership position that will involve working across technology, data, security, risk and compliance teams. You will help establish practical approaches to data protection while ensuring they can be implemented effectively across a large and complex technology environment.

The role combines data protection strategy, technical delivery, risk management and stakeholder leadership.

• What You'll Be Doing
• Lead the development and delivery of data protection and data risk initiatives across the organization.
• Establish practical frameworks for identifying, protecting and monitoring sensitive information.
• Drive initiatives focused on discovering and classifying sensitive data, including PII and PHI.
• Implement data protection techniques such as masking, tokenization and other methods of protecting sensitive information.
• Develop approaches for measuring, monitoring and reporting data related risks.
• Identify areas of data exposure and work with technical teams to implement appropriate remediation.
• Work closely with data owners, engineering teams, security, risk and compliance stakeholders.
• Support the implementation and ongoing development of Data Security Posture Management (DSPM) capabilities.
• Evaluate and implement technologies that improve data discovery, classification, protection and monitoring.
• Work across cloud and modern data environments to ensure appropriate controls are incorporated into data platforms.
• Define requirements and translate business and regulatory needs into practical technical solutions.
• Own delivery priorities and coordinate work across multiple technical and business teams.
• Support the adoption of data protection standards and processes across the wider organization.
• Provide leadership and technical guidance to team members involved in data protection and risk initiatives.

• What We're Looking For
• 7+ years of experience across data protection, data governance, data security, data risk or related areas.
• Strong understanding of data protection principles and the management of sensitive information.
• Experience identifying and protecting PII, PHI and other sensitive data.
• Hands on experience implementing data protection technologies and controls.
• Knowledge of techniques including data masking, tokenization, classification and sensitive data discovery.
• Experience developing data risk frameworks, measurements and reporting.
• Strong understanding of metadata management, data governance and data quality.
• Experience working with modern data platforms and large scale enterprise data environments.
• Ability to translate business, security and regulatory requirements into practical technology solutions.
• Experience leading complex initiatives involving multiple technical and business stakeholders.
• Strong communication skills with the ability to work with senior stakeholders across technology, risk and compliance.
• Working knowledge of SQL, data analysis and data modelling.
• Experience working within Agile delivery environments.