Senior Lead, Data Protection and IAM, DLP

The role of Data Protection & IAM (Identity and Access Management) Senior Lead involves developing, implementing, and overseeing data security and IAM strategies for the organization's business units. Your responsibilities will include ensuring compliance with regulatory requirements, enforcing security policies, and strengthening access control mechanisms to safeguard sensitive business data. Collaboration with IT, security, risk, compliance, 2LOD, and business stakeholders is crucial to maintaining a strong security posture. Key Responsibilities: - Developing and executing data protection policies, procedures, and standards to protect sensitive business information. - Implementing encryption, tokenization, and data loss prevention (DLP) solutions to secure critical assets. - Ensuring compliance with data privacy regulations like GDPR, CCPA, HIPAA, and industry-specific security frameworks. - Collaborating with business units to classify and manage data based on sensitivity, risk, and business impact. - Leading the design and enforcement of IAM policies, including role-based access control (RBAC) and least privilege principles. - Managing identity lifecycle processes (provisioning, de-provisioning, access reviews) to prevent unauthorized access. - Overseeing authentication mechanisms like multi-factor authentication (MFA) and single sign-on (SSO) to enhance security. - Conducting periodic access audits and ensuring alignment with security best practices. - Assisting in the investigation and resolution of security incidents related to data protection and IAM. - Partnering with cybersecurity teams to enhance threat detection and response capabilities. - Continuously assessing and improving IAM and data protection frameworks to align with evolving business and security needs. - Monitoring and reporting on security metrics, vulnerabilities, and compliance status to leadership. - Having experience working with commercial IAM products for a sizeable enterprise. This role requires a thorough understanding of data protection, IAM principles, and regulatory requirements. Effective communication and collaboration skills are essential for engaging with various stakeholders to ensure a robust security posture.,