Enterprise Control Data Protection Director

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary: Regular

Language Fluency: English (Required)

Work Shift: 1st shift (United States of America)

An executive-level role that is accountable for transforming the data protection function, inclusive of data loss prevention, data tagging and labeling, encryption, insider threat investigations, and user & entity behavior analytics (UEBA) across the enterprise. This is a line of business and IT facing role that will identify, assess, and mitigate risks across the organization by designing, implementing, and monitoring business process, risk and controls to ensure compliance with laws, rules and regulations to protect the organization’s data from unauthorized use or disclosure, while maintaining operational efficiency.

This includes collaboration with prudential regulators, the board of directors, senior executives in the lines of business, enterprise technology, external and internal auditors, risk management, governance and controls office, and regulatory relations to evaluate and improve business processes, controls, and procedures. This role will be responsible for driving the technology strategy, engineering, and operational functions of the Data Protection program for both on-premise and cloud-based data.

The role requires enterprise-wide exposure, visibility and accessibility, and must be located in Charlotte, Atlanta, or Raleigh in an office-centric workstyle.

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Stakeholder Management:
  Collaborate with different lines of business and IT organizations to understand their operations, identify control needs, and provide guidance on control implementation.
• Risk Assessment and Prioritization:
  Identify risks across the enterprise, including financial, operational, compliance, and reputational risks, through analysis of processes and internal controls.
• Business Process, Control Design and Implementation:
  Design, implement and sustain robust business processes, controls, and procedures to mitigate inherent risk.
• Technology Portfolio Strategy and Implementation:
  Design, implement, and maintain a robust portfolio of data protection and insider threat investigations technologies to support a comprehensive domain strategy.
• Control Monitoring and Evaluation:
  Develop and implement metrics and regularly assess the effectiveness of data protection processes and controls to identify and remediate identified gaps.
• Control Reporting and Communication:
  Prepare reports on enterprise-wide data protection process and control efficacy to include risk assessment results and policy adherence status to the board, senior management, and relevant stakeholders.
• Controls Strategy and Roadmap Development:
  Create enterprise-wide strategies and roadmaps to reduce risk through the implementation and maturity of preventative, detective and corrective data protection controls.
• People Leadership:
  Set the tone for the enterprise that aligns with industry controls best practices to enable the enterprise to achieve its financial and non-financial Objectives and Key Results (OKRs).
• Financial Management:
  Own the budget and develop business cases to make labor, hardware and software investments to protect the enterprise data environment while staying within financial forecast.
• Continuous Improvement:
  Proactively identify opportunities to enhance, expand and mature the data protection controls and control framework to optimize…