Executive Director, Data Protection & Privacy

What you'll do

• Define and drive the enterprise data protection strategy, roadmap, and multi-year investment plan.
• Own the design, deployment, and continuous tuning of enterprise DLP controls across all channels.
• Lead enterprise-wide data discovery to identify and inventory sensitive data across all data stores.
• Establish and operationalize data classification standards, taxonomies, and labeling schemes across all platforms.
• Partner with engineering teams to embed privacy-by-design and privacy-enhancing technologies into data pipelines and AI/ML workflows.
• Ensure the data protection program aligns with HIPAA, GDPR, CCPA/CPRA, and other regulatory requirements.
• Build and refine use cases for detecting data exfiltration, insider risk, and unauthorized data movement.
• Establish metrics and KPIs to measure program maturity and present regular reports to senior leadership.

What we're looking for

• Minimum of 15 years of experience in data protection, data privacy, or information security.
• Minimum of 5 years of experience in a senior leadership or executive-level role.
• Proven experience designing and operationalizing enterprise DLP programs across endpoint, network, email, and cloud/SaaS environments.
• Demonstrated experience leading enterprise data discovery and establishing data classification standards and taxonomy.
• Hands-on experience with data privacy engineering techniques including encryption, tokenization, data masking, and anonymization.
• Strong working knowledge of HIPAA, GDPR, CCPA/CPRA, and other applicable state and federal privacy regulations.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Law, or a related field.
• Master's degree or JD (preferred); CIPP, CIPM, or CDPSE certifications (preferred).