Manager, Data Protection

Clayco is a full-service, turnkey real estate development, master planning, architecture, engineering, and construction firm that safely delivers clients across North America the highest quality solutions on time, on budget, and above and beyond expectations. With $7.6 billion in revenue for 2024, Clayco specializes in the "art and science of building," providing fast track, efficient solutions for industrial, commercial, institutional, and residential related building projects.

The Role We Want You For

Under the direction of the CISO, the Data Protection Manager will be focused on all aspects of research, planning, design, implementation, governance, analytics, automation, and partner relationship management related to ensuring effective and compliant Protection of Enterprise Data as well as effective regular assessment of justified and appropriate access to Data across the Clayco organization.

The ultimate goal of this position is establishing and maintaining an inventory of Data repositories, discovery and classification of Data stored within inventoried repositories, and insights into provisioned access and access events for all discovered Data to ensure that all activity is scrutinized against appropriate threat models, least-privilege principles, and regulatory and contractual obligations. This includes understanding and documentation of Dataflows to identify potential exposures of Data during processing, especially when Artificial Intelligence (AI) tools are utilized.

Oversight, administration, and life-cycle management of the tools delivering these capabilities as well as their ongoing effectiveness assessments and evaluation against alternatives will also be part of the Data Protection Manager role.

This role will contribute to existing and evolving Business Relationship Management and Data Architecture functions to ensure cohesive inventory, management, classification, protection, recoverability, and retention of Enterprise Data to enable its intended value, establish its justification, ensure appropriate access, and assess its relative compliance across the Clayco organization. In collaboration with the Data Analytics & Engineering team, this role will also contribute to the establishment of a formal Master Data Management discipline as well as maintain, periodically review for revision recommendations, and coordinate publishing and communication of Clayco’s Enterprise Data Classification & Protection Policy.

As uch, this role requires working across multiple work streams and communicating effectively with Senior Technology Leaders and Business Partners which span across multiple lines of Business within Clayco.

The Data Protection Manager will also work with Project Management throughout the Project Delivery life-cycle to evaluate designs and configurations of Solutions enabling the discovery, classification, and protection of Data as well as Controls supporting role-based, least-privilege access and compliant storage, handling, and transfer of Clayco Data.

The Specifics of the Role

• Contributes to the ongoing development and maintenance of a Data Classification & Protection Policy, Data Labeling taxonomy and deployment strategy as well as produces Training materials to educate the contributing Data Users on their responsibilities
• Contributes to the development of processes to identify and mitigate privacy and Data exposure Risks associated with artificial intelligence, ensuring compliance with applicable regulations and supporting ethical use of AI in medical devices and cloud-based services.
• Contribute to the design and implementation of Data Loss Prevention (DLP) and Information Protection solutions across the scope of Clayco’s Data landscape
• Configure, tune, and optimize DLP policies and rules across multiple platforms with a bias towards optimizing signal-to-noise ratios and minimizing false positives while partnering with the Security Operations Center (SOC) team to operationalize monitoring, alerting and response actions to DLP events
• Analyzes process and control gaps relative to achieving regulation-driven or business-defined requirements and expectations
• Contributes to the…