Job Description

Job description : The Data Protection IAM (Identity and Access Management ) Sr. Lead is responsible for developing, implementing, and overseeing data security and IAM strategies across the organization s business units. This role ensures compliance with regulatory requirements, enforces security policies, and strengthens access control mechanisms to protect sensitive business data. The role involves close collaboration with IT, security, risk, compliance, 2LOD and business stakeholders to maintain a strong security posture. Key Responsibilities: Develop and execute data protection policies, procedures, and standards to safeguard sensitive business information. Implement encryption, tokenization, and data loss prevention (DLP ) solutions to protect critical assets. Ensure compliance with data privacy regulations such as GDPR, CCPA, HIPAA, and industry-specific security frameworks . Work with business units to classify and manage data based on sensitivity, risk, and business impact. Lead the design and enforcement of IAM policies , including role-based access control (RBAC) and least privilege principles. Manage identity lifecycle processes (provisioning, de-provisioning, access reviews) to prevent unauthorized access. Oversee authentication mechanisms, such as multi-factor authentication (MFA) and single sign-on (SSO), to enhance security. Conduct periodic access audits and ensure alignment with security best practices. Assist in the investigation and resolution of security incidents related to data protection and IAM. Partner with cybersecurity teams to enhance threat detection and response capabilities. Continuously assess and improve IAM and data protection frameworks to align with evolving business and security needs. Monitor and report on security metrics, vulnerabilities, and compliance status to leadership. Experience working with commercial IAM products for a sizeable enterprise .