Develop and maintain enterprise data security standards, frameworks, and control objectives, including but not limited to: Data Loss Prevention (DLP), data classification, encryption, data retention, data access governance, and monitoring.

Partner with security architects and platform teams to ensure secure-by-default configurations and data handling practices.

Define and maintain baselines for data protection tools and technologies across structured and unstructured data.

Monitor compliance with security standards and policies across business units and platforms; report gaps and recommend remediation strategies.

Establish data security metrics, KPIs, and dashboards to track compliance, maturity, and risk exposure.

Serve as authority for Data Security, staying ahead of evolving threats, technologies, regulations (e.g., GDPR, HIPAA, CCPA), and industry standards (e.g., NIST, ISO 27001).

Provide expert input into risk assessments, architectural reviews, and governance processes for data initiatives.

Collaborate across engineering, compliance, privacy, and risk teams to embed data protection principles into business and technical strategies.

Lead security reviews, identify gaps, and drive continuous improvement in data protection practices.

Mentor and grow a team of security engineers focused on standards, data-centric threat modeling, and strategic compliance monitoring.