Data Security Lead

Overview

Here at Discount Tire, we celebrate the spirit of our people with extraordinary pride and enthusiasm. Our business has been growing for more than 60 years and now is the best time in our history to join us. We are opening more locations every year and we are always looking for qualified individuals to join us in our growth. We are a company that promotes from within, both in our retail and corporate operations.

Under minimal supervision, the Senior Data Security Engineer is responsible for protecting the organization’s sensitive data across all platforms, ensuring compliance with regulatory requirements, and mitigating data security risks. Leads the design, implementation, and management of data protection program and strategy, including data classification, encryption, data loss prevention (DLP), and secure data governance. Collaborates with cross‑functional teams, including IT, compliance, and risk management, to establish a data security framework that aligns with business objectives and industry best practices.

• Data Security Strategy and Governance
  • Help establish and own Discount Tire Data Security Program.
  • Develop and lead the organization’s data security strategy to ensure protection of sensitive, regulated, and proprietary data.
  • Implement data classification, data governance, and lifecycle management policies.
  • Ensure alignment with NIST CSF 2.0 and CIS TOP
    18 cybersecurity frameworks and data privacy regulations (CCPA and PCI DSS).
  • Plan and develop security measures to safeguard information against accidental or unauthorized modification, destruction, or disclosure.
• Data Protection and Risk Mitigation
  • Lead the deployment and management of Data Security tools (MS Purview, Cyera Omni DLP and Cyera DSPM), encryption, and tokenization solutions.
  • Monitor for data exfiltration, leakage, or unauthorized access across on‑premises and cloud environments.
  • Partner with cloud security and infrastructure teams to ensure secure storage, transfer, and access to data.
• Compliance and Audit Support
  • Serve as the subject matter expert for data protection in support of internal and external audits.
  • Collaborate with compliance teams to maintain adherence to regulatory requirements and industry certifications.
  • Maintain records of data security incidents and oversee the investigation and remediation process.
• Leadership and Collaboration
  • Provide technical guidance and mentorship to cybersecurity analysts and engineers focusing on data security.
  • Partner with business units (Information Lifecycle Management ILM) to integrate data security controls into projects and initiatives.
  • Conduct data security training and awareness sessions to reduce the risk of human error.
  • Perform other related responsibilities and special projects as assigned, which may include cross‑functional initiatives, process improvements, or temporary assignments to support organizational goals and evolving business needs.

• This position requires a minimum of 5 years’ experience in information security with a focus on data security or data protection.
• Proven experience with DSPM and DLP, encryption technologies, data governance, and cloud security solutions.
• Excellent communication and collaboration skills with the ability to influence technical and non‑technical stakeholders.
• Demonstrated ability to operate independently in a greenfield or rapidly maturing environment.
• Technical
  
  Skills:
  • Proficiency with Microsoft Purview, Cyera DSPM and Cyera Omni DLP (or similar).
  • Experience with cloud data security controls in AWS and Azure environments.
  • Strong understanding of data privacy regulations and compliance frameworks.
• Key
  
  Competencies:
  • Strategic thinking with a risk‑based approach to data protection.
  • Strong problem‑solving and incident response capabilities.
  • Effective communication and ability to influence stakeholders at all levels.
  • Detail‑oriented with excellent organizational skills.

• Bachelor’s degree in Information Security, Computer Science or a related field or equivalent experience is required. Master’s degree or MBA preferred.
• Professional certifications are a plus. Preferred
  
  Certifications:
  
  CISSP, CISM, CCSP, or CDPSE (ISACA Data Privacy Solutions Engineer).

Normal work days are Monday through Friday. Occasional Saturdays and Sundays may be necessary.

Normal work hours are 8:00 a.m. to 5:00 p.m. Additional hours may be necessary.

Discount Tire provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law.