Data Security Director

About Us

Barry-Wehmiller is a diversified global supplier of engineering consulting and manufacturing technology for the packaging, corrugating, sheeting and paper-converting industries. By blending people-centric leadership with disciplined operational strategies and purpose-driven growth, Barry-Wehmiller has become a $3 billion organization with nearly 12,000 team members united by a common belief: to use the power of business to build a better world.

• Serve as the subject matter expert responsible for building good governance systems and controls to ensure the protection of BW’s unstructured data (including documents, email, chat and Teams content, file shares, endpoint and cloud-stored files, and engineering and design files such as CAD drawings).
• Note:
  
  protection of structured data is the responsibility of BW’s Business Insights team.
• Ensure that Barry-Wehmiller has a well-defined strategy to protect the company’s data assets on an ongoing basis.
• Advise the BW Board of Directors, BW Senior Leadership Team, the IT Leadership Team, and other colleagues on data security matters, inclusive of emerging threats, vulnerabilities, risks, and regulatory requirements, ensuring that timely and appropriate mitigations take place.
• Engage with data owners and data processors to operationalize controls and promote good data protection practice across Barry-Wehmiller.

Develop, implement, and maintain BW’s Data Security program coordinating across all IT and business functions to ensure BW has a robust approach to securing our data and ensuring business continuity. Collaborate with other functional areas, departments, platforms, and divisions of the business to maintain records of all data assets, storage, access, exports, etc., and maintain a data security incident management plan to ensure timely remediation of incidents impacting critical data including impact assessments, breach response, complaints, claims or notifications.

Define, set, and oversee the implementation of the BW data loss prevention strategy, actively manage Barry-Wehmiller’s policies, implement data privacy and loss controls, and supporting standards to ensure compliance with requirements under data privacy laws in all relevant jurisdictions, working in close coordination with the BW Group Data Protection Officer. Support investigations into data breaches and monitor any remedial actions and lessons learned to ensure future breaches are avoided and business risks are mitigated.

Ensure appropriate governance, business processes and controls are in place to manage data security in alignment with BW’s risk appetite. Establish metrics and periodic control testing to evaluate the effectiveness of BW’s data security program, and report results, exceptions, and risk trends to the Chief Information Security Officer and the IT Leadership Team. Partner with the BW Group Data Protection Officer on employee training and awareness programs covering the importance of protecting sensitive data and compliance with BW’s data protection policies and procedures, and support the Group Data Protection Officer in responding to external authorities and regulatory bodies on data protection matters.

Engage with the Business Insights (structured data) team to ensure consistent development and application of policies as well as regulatory compliance. Establish and maintain governance for the use of BW data in artificial intelligence and generative AI tools, including Microsoft 365 Copilot and Claude Enterprise— covering content oversharing and permission hygiene, sensitivity labeling, acceptable-use standards, and the identification and control of unsanctioned (“shadow”) AI use.

Lead the identification,…