Senior Manager, Data & Cloud Security

About the role

We are seeking a highly skilled Data & Cloud Security Manager to lead and strengthen our global data and cloud security programs. This role is responsible for safeguarding sensitive data across on-premises and multi-cloud environments, driving encryption oversight, enabling, and managing DLP capabilities, leading data incident response, and ensuring alignment with global privacy and regulatory requirements.

Responsibilities

• Lead and enforce the enterprise data security and cloud security strategy and roadmap.
• Design, implement, monitor, and optimize enterprise-wide data security controls, including global DLP solutions across endpoint, network, email, and cloud environments.
• Oversee encryption standards and key management practices (data at rest, in transit, and in use).
• Secure cloud and SaaS platforms using cloud-native and third-party security controls (CSPM, CASB, CWPP, CIEM).
• Support the Data Governance Council in implementing data classification and labeling frameworks.
• Lead technical investigations of data breaches and cloud security incidents.
• Align security controls with global privacy and regulatory requirements (e.g., GDPR, CCPA, PCI-DSS, ISO 27001, EU AI Act, DGA).
• Conduct risk assessments and drive remediation of data and cloud security gaps.
• Serve as a data security SME on the Technical Review Board and support development teams in applying Security by Design principles.
• Ensure best practices are applied in secure cryptographic configurations across servers, databases, storage, and cloud platforms.
• Support the implementation and governance of enterprise data retention programs and lifecycle management frameworks.
• Evaluate tokenization, masking, and anonymization solutions where required.
• Primarily hands-on and execution-focused to enforce data security policy requirements, with a small component of team management and mentorship.
• Provide metrics and executive reporting on the company’s data security posture.

Requirements

• Bachelor’s degree in information security, Computer Science, or a related field.
• 7+ years of cybersecurity experience, with a strong focus on data security and cloud security.
• Hands-on expertise in encryption technologies, DLP solutions, PKI, and cloud security implementations.
• Experience securing AWS, Azure, and/or GCP environments.
• Strong understanding of regulatory and cybersecurity frameworks (e.g., NIS2, DORA, SOCI, ISO 27001, NIST, SOC 2).
• Proven experience managing and responding to data security incidents.
• Hands-on experience with Microsoft Purview DLP and ServiceNow.
• Professional certifications such as CISSP, CCSP, CISM, GCDP, or equivalent security certifications.