The Data Protection and Controls Manager will oversee and enforce the Global Information Security Standard globally with a focus on cloud. The role will also implement and manage internal controls and assess the effectiveness of the internal controls in cloud and on-premise.

Key Responsibilities include:

• Maintain the Data Protection Standard, procedures, and associated guidelines

• Develop comprehensive and effective technology/administrative controls for each standard requirement

• Maintain and establish as necessary, data protection control objectives and relevant mappings

• Drive the development, implementation, of control metrics (KPIs, and KRIs)

• Assists in the creation of the Data Protection Strategy for on-premise and cloud controls; with a focus on preventative controls

• Leads the team audit preparation activities, ensures audit readiness across control teams and supports audit responses

• Identify potential areas of control enhancements and develop/implement corrective action plans and/or initiatives for resolution

• Consult on data protection security decisions for the multi (AWS, Azure) cloud environment ensuring protection of data

• Reviews or prepares reports/documents to be communicated to key stakeholders and executives in complex situations

• Anticipates risks and issues of technical complexity based on understanding of trends and the goals and objectives of Global Information Security

• Assists in creation of forums, benchmarking analyses, and processes that result in improvement, information sharing and innovation across enterprise

• Accountability for Security and Internal Controls and multi-generational data protection projects

• Proactively manages key stakeholder expectations at the manager level and above, advising on optimal approaches and resolving conflicts between internal controls, information security requirements

Required Skills:

• 6+ years of Information Security/ IT Risk Management/IT experience with growing responsibilities

• Demonstrated proficiency in info security, and cloud computing domains as evidenced by industry certifications, including understanding of traditional and emerging threats with particular emphasis in Information Security controls and technologies to reduce operational and security risk covering AWS, Azure, and/or M365

• Knowledge, understanding, and technical proficiency in cloud technologies/services (Virtual Private/Hybrid Cloud, SaaS, IaaS) and the appropriate controls and processes to secure them or reduce risk

• 5+ years of experience in technology internal control, audit risk or compliance for a large and complex organization

• 5+ years of managing enterprise policies and standards development and maintenance that includes standards, playbooks and procedures

• Advanced/Expert MS PowerPoint/ Excel, to develop various levels of presentations and to track/manage many different types of data efforts

• Strong ability to analyze data to identify thematic issues / areas requiring improvement

Manages a team or teams accountable for providing cybersecurity defense across multiple disciplines. Leads the analysis, implementation, execution and ongoing improvement of proactive security controls to prevent external threat actors from infiltrating company information or systems. Utilizes experience and deep knowledge of IT platforms, tools, and concepts to ensure cybersecurity protection is integrated at all layers of defense. Leads alert responses and problem solving workgroups across multiple functions with a focus on the enterprise risk framework. Typically has over 10 years of relevant experience including managing teams.