Data Security Posture (DSPM) Senior Manager

KeyBank • Brooklyn, OH

1d • Hybrid

About The Position

The Data Security Posture (DSPM) Senior Manager will lead a Data Security Operations team at KeyBank, focusing on ensuring the secure handling of sensitive data both within KeyBank's environment and when shared externally. The team will utilize sensitive data identification tools, data inventory reports, and data loss prevention tools to detect non-compliant data handling, assess and escalate issues, and empower data asset and engagement owners to secure their data appropriately. The role involves working with data owners to resolve deviations from corporate data protection standards, reviewing and approving remediations and variances, and collaborating with the Data Security Governance team to develop guidance. Additionally, the manager will drive continuous improvement in data de-identification methods and the Data Loss Prevention (DLP) program by evaluating new technologies and industry best practices, and ensuring DLP controls are integrated and effective across all platforms and business units.

Requirements

• Familiarity and experience with data security and data protection concepts, challenges, and practical applications.
• Attention to detail, including while cross-referencing various documentation and record keeping.
• Analytical reasoning, problem solving, and strategic planning.
• Ability to interact with, guide and educate non-technical personnel, imparting relevant data security knowledge.
• Ability to research and analyze industry trends and adopt them to team’s goals, tools, and processes.

Responsibilities

• Lead a Data Security Operations team responsible for ensuring sensitive data is securely handled.
• Use the results of sensitive data discovery scanning on data center and cloud storage platforms to identify deviations from corporate data protection standards and work with data owners to resolve.
• Review and approve remediation of non-compliance with data protection requirements in standards, at initial or escalated stages, depending on a platform.
• Review and approve variances against data protection requirements in Security and IT standards.
• Work with Data Security Governance team to develop guidance for sensitive data owners on how to secure their data.
• Drive continuous improvement of the data de-identification methods for non-production environments by evaluating new technologies and industry best practices.
• Guide the Data Loss Prevention (DLP) team in identifying, documenting, and closing gaps in data loss controls across all data channels, including email, cloud, endpoint, and remote print.
• Ensure DLP controls are integrated and effective across all platforms and business units through collaborate with cross-functional teams.
• Drive continuous improvement of the DLP program by evaluating new technologies and industry best practices.

Benefits

• Eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed