Job Description:
Roles and Responsibilities
Lead and develop a high-performing team that lives DXC’s values: Deliver, Do the right thing, Care, Collaborate, and Community.
Own the data protection strategy and roadmap, including the projects that deliver it, and set priorities and milestones with senior leadership.
Direct the design and implementation of data protection controls across business processes, with a focus on protecting intellectual property and sensitive data.
Establish and govern data classification and sensitivity standards, and oversee the identification, classification, and protection of structured and unstructured data across cloud and on-premises environments.
Lead Data Security Posture Management (DSPM) efforts to discover, inventory, and assess sensitive data across multi-cloud and SaaS environments, and to reduce exposure from over-permissioned access and shadow data.
Define controls and governance for AI systems that process or generate company data, including data use in model training, retrieval-augmented generation, prompt and output handling, and third-party AI services.
Ensure compliance with global data privacy and AI frameworks, including GDPR, and other state and national privacy laws, ITAR, NIST CSF and NIST AI RMF, and ISO/IEC 42001 where applicable, and translate their requirements into practical controls.
Lead audit and assessment readiness, owning playbooks, evidence, and responses to internal audit, external auditors, and customer reviews.
Produce executive-level reports and presentations on data protection, privacy, and AI risk that support investment and risk decisions.
Approve and oversee knowledge articles, FAQs, procedures, and standards, and ensure they stay current.
Oversee task tracking and stakeholder communication through tools such as Azure DevOps, with clear reporting on progress and risk.
Sponsor and deliver training programs on data protection, privacy, and responsible AI use across the company.
Coordinate with Internal Audit, Legal, Communications, and business leaders on data protection matters.
Skills and Attributes for Success
Lead by example in applying DXC’s values, and build accountability and trust within the team.
Strong people leadership: hire, coach, develop, and performance-manage a team of analysts and engineers.
Expertise in audit readiness, governance, and documentation, with the ability to drive process improvement across teams.
Working knowledge of IP protection strategies, including classification of trade secrets and proprietary code, access governance, and exfiltration prevention.
Experience with AI security and governance concepts, including model and data lineage, AI usage policies, and risks such as data leakage through prompts, training data exposure, and unauthorized AI tools.
Proficiency with Microsoft 365 and Azure security services, and familiarity with multi-cloud environments.
Requirements
Bachelor’s degree in computer science, Information Systems Management, Engineering, or a similar discipline, or equivalent experience.
Minimum of 6 years of experience in data protection, information security, or privacy, including at least 2 years in a leadership or people management role.
Hands-on experience with data protection technologies, including data discovery, classification and labeling, data inventory, CASB, Microsoft Purview, information rights management, and data loss prevention.
Experience managing Microsoft 365 DLP, Azure Information Protection, Insider Risk Management, Defender for Cloud Apps, Security Compliance, and Secure Score.
Experience with DSPM platforms and multi-cloud data security.
Working knowledge of data protection and privacy frameworks, including GDPR, HIPAA, NIST CSF, NIST AI RMF, and ITAR.
Experience governing AI systems or AI-related data risk, and familiarity with emerging AI regulation and standards.
Experience with IT service management and service desk integration.
Excellent written and verbal communication skills, with…