Sr Manager, Data Protection

PayPal•Scottsdale, AZ

44d

About The Position

Recognized as a security expert, independently resolving the most complex security challenges and providing strategic direction on problem resolution across the security domain. Define methods and procedures for new or special assignments, collaborating with cross-functional teams to drive security initiatives that align with business needs and objectives. Lead complex, high-impact security projects of diverse scope, applying an in-depth understanding of business trends and security challenges to develop innovative solutions. Possess a keen awareness of the broader impact of decisions, with initiatives often leading to enterprise-wide improvements that enhance security practices and operational efficiency. Lead a security engineering team; set clear priorities and define actionable plans, ensuring alignment with organizational goals. Guide team members through complex challenges, fostering their growth and development while maintaining a focus on high-impact results. Design and deliver protection solutions at scale data delivering protection solutions across cloud, on-prem, and SaaS ecosystems using industry-leading technologies for data discovery, classification, encryption, and policy enforcement, integrating DLP and governance tools to ensure consistent protection across platforms. Drive data discovery, tagging, and classification initiatives to ensure consistent sensitivity labeling and access enforcement. Establish and enhance data protection processes and governance frameworks, including policy lifecycle management, exception handling, and continuous control improvement. Promote data minimization through profiling, reduction, and anonymization of sensitive datasets. Lead and mentor a team of cloud security and data protection professionals, fostering collaboration, accountability, and innovation. Drive process standardization and automation for data protection operations, from classification workflows to incident response, remediation, and audit readiness. Measure and report effectiveness of data protection controls and programs through KPIs, maturity assessments, and continuous improvement cycles. Collaborate with engineering and operations teams to embed data protection requirements into CI/CD pipelines, service delivery models, and platform change processes.

Requirements

8+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience.
Experience leading others
8+ years of experience in Information Security, including 5+ years in Cloud or Data Protection.
Deep, hands-on experience with security tools, including a variety of DLP tools, Data-at-Rest scanning, data tagging, and Data Catalog.
Proven track record of implementing data protection or DLP at enterprise scale.
Experience with DevSecOps and Infrastructure-as-Code (Terraform, GitHub Actions).
Strong leadership, communication, and stakeholder management skills.
Strategic thinker with a hands-on technical mindset.
Strong leadership and communication skills for cross-functional alignment.
Demonstrated ability to deliver complex initiatives in a fast-paced, global environment.
Experience implementing Data Protection as a Service

Responsibilities

Define methods and procedures for new or special assignments, collaborating with cross-functional teams to drive security initiatives that align with business needs and objectives.
Lead complex, high-impact security projects of diverse scope, applying an in-depth understanding of business trends and security challenges to develop innovative solutions.
Lead a security engineering team; set clear priorities and define actionable plans, ensuring alignment with organizational goals.
Design and deliver protection solutions at scale data delivering protection solutions across cloud, on-prem, and SaaS ecosystems using industry-leading technologies for data discovery, classification, encryption, and policy enforcement, integrating DLP and governance tools to ensure consistent protection across platforms.
Drive data discovery, tagging, and classification initiatives to ensure consistent sensitivity labeling and access enforcement.
Establish and enhance data protection processes and governance frameworks, including policy lifecycle management, exception handling, and continuous control improvement.
Promote data minimization through profiling, reduction, and anonymization of sensitive datasets.
Lead and mentor a team of cloud security and data protection professionals, fostering collaboration, accountability, and innovation.
Drive process standardization and automation for data protection operations, from classification workflows to incident response, remediation, and audit readiness.
Measure and report effectiveness of data protection controls and programs through KPIs, maturity assessments, and continuous improvement cycles.
Collaborate with engineering and operations teams to embed data protection requirements into CI/CD pipelines, service delivery models, and platform change processes.