Sr Manager Information Security

DXC Technology•Washington, DC

3d•$165,500 - $307,300•Hybrid

About The Position

The Sr Manager Information Security leads a team responsible for data protection, privacy, and AI security governance. The role owns the data protection strategy and roadmap, sets priorities and milestones with senior leadership, and directs the design and implementation of controls to protect intellectual property and sensitive data across business processes, cloud services, and on-premises environments. The position establishes data classification and sensitivity standards; oversees data discovery, inventory, classification, and protection; and leads Data Security Posture Management (DSPM) initiatives across multi-cloud and SaaS environments. It also defines governance and controls for AI systems that process or generate company data, including model training, retrieval-augmented generation, prompts and outputs, and third-party AI services. The role translates applicable privacy, security, and AI frameworks into practical controls; leads audit and assessment readiness; prepares executive reporting on data protection, privacy, and AI risk; maintains standards and procedures; tracks work and communicates progress and risk; and delivers employee training. The manager coordinates with Internal Audit, Legal, Communications, and business leaders.

Requirements

Bachelor’s degree in computer science, Information Systems Management, Engineering, or a similar discipline, or equivalent experience.
At least 6 years of experience in data protection, information security, or privacy, including at least 2 years in a leadership or people-management role.
Hands-on experience with data protection technologies, including data discovery, classification and labeling, data inventory, CASB, Microsoft Purview, information rights management, and data loss prevention.
Experience managing Microsoft 365 DLP, Azure Information Protection, Insider Risk Management, Defender for Cloud Apps, Security Compliance, and Secure Score.
Experience with DSPM platforms and multi-cloud data security.
Working knowledge of data protection and privacy frameworks, including GDPR, HIPAA, NIST CSF, NIST AI RMF, and ITAR.
Experience governing AI systems or AI-related data risk, and familiarity with emerging AI regulation and standards.
Experience with IT service management and service desk integration.
Excellent written and verbal communication skills, including the ability to present to executive audiences.
Strong people leadership skills, including hiring, coaching, developing, and performance-managing a team.
Expertise in audit readiness, governance, and documentation, with the ability to drive process improvement across teams.
Working knowledge of intellectual-property protection strategies, including trade-secret and proprietary-code classification, access governance, and exfiltration prevention.
Experience with AI security and governance concepts, including model and data lineage, AI usage policies, and risks such as prompt-related data leakage, training-data exposure, and unauthorized AI tools.
Proficiency with Microsoft 365 and Azure security services, and familiarity with multi-cloud environments.
Ability to lead by example in applying DXC’s values and build accountability and trust within the team.

Responsibilities

Lead, develop, and performance-manage a high-performing team of analysts and engineers.
Own the data protection strategy and roadmap, including related projects, priorities, and milestones in coordination with senior leadership.
Direct the design and implementation of data protection controls to protect intellectual property and sensitive data.
Establish data classification and sensitivity standards and oversee the discovery, inventory, classification, and protection of structured and unstructured data across cloud and on-premises environments.
Lead DSPM efforts to assess sensitive data across multi-cloud and SaaS environments and reduce exposure from over-permissioned access and shadow data.
Define controls and governance for AI systems that process or generate company data, including model training, retrieval-augmented generation, prompt and output handling, and third-party AI services.
Translate applicable privacy, security, and AI framework requirements into practical controls.
Lead audit and assessment readiness, including playbooks, evidence, and responses to internal audits, external auditors, and customer reviews.
Produce executive-level reports and presentations on data protection, privacy, and AI risk to support investment and risk decisions.
Approve and oversee knowledge articles, FAQs, procedures, and standards, and keep them current.
Oversee task tracking and stakeholder communication through tools such as Azure DevOps, reporting on progress and risk.
Sponsor and deliver training on data protection, privacy, and responsible AI use.
Coordinate data protection matters with Internal Audit, Legal, Communications, and business leaders.