Data Security Director

Builds and leads a new Data Security team at CLS, part of the Attack Surface Management group that covers cyber hygiene and data. The director reports to the Managing Director, CISO US Services, and is based in New Jersey.

The first task is standing up the team itself: its operating model, processes, roles and responsibilities. From there the director sets and refines the firm's data security strategy and framework, spanning data loss prevention, protection of data at rest and in transit, email security, masking and tokenisation, discovery and classification, secrets scanning and management, and how third parties handle CLS data. The role works hand in hand with the operational teams that run these controls and with Security Architecture on designing and engineering data security services. It also covers governance, process and policy to protect critical information, oversight of enterprise data protection controls and the metrics that track them, staff education on secure data handling with the Training and Awareness team, and direct management of the vendors that supply services to the function.

CLS wants 12 to 15 years in data or information security, roughly eight to ten of them leading data security teams, preferably in heavily regulated settings. Experience reporting to senior management, representing a team on governance committees, and applying regulatory and industry standards to data security is expected, along with close working ties to legal and privacy colleagues.