Senior Manager, Data Protection Engineering

* Lead the definition of enterprise data protection strategy, reference architectures, and control frameworks, including DLP, data discovery and classification, and encryption requirements.* Establish and maintain data protection standards, guardrails, and design patterns that guide implementation across endpoints, cloud platforms, applications, and collaboration tools.* Define policy and control requirements for encryption, key management, and secrets management in partnership with Cloud, Infrastructure, and Identity teams, ensuring alignment with data protection objectives.* Oversee the implementation, configuration, and lifecycle governance of data protection technologies such as DLP, data classification, and data discovery solutions.* Provide architectural guidance and design review for data protection integrations within platforms, applications, and business solutions.* Influence tooling decisions through risk‐based requirements, not operational ownership of underlying cloud or infrastructure services.* Embed security‐by‐design principles for data protection into the application and platform lifecycle, including requirements for data handling, classification, retention, and policy enforcement.* Partner with Digital, Cloud Services, Infrastructure, and IT teams to ensure data protection controls are designed into platforms, not bolted on post‐deployment.* Collaborate with Privacy, Legal, Compliance, and Cyber Defense teams to ensure data protection controls support global regulatory and industry requirements (e.g., GDPR, HIPAA, SOX, GxP).* Translate regulatory and privacy requirements into clear, implementable data protection controls and guidance.* Lead, mentor, and develop a team of engineers and analysts focused on data protection engineering and architectural enablement.* Establish clear role boundaries between data protection control ownership and platform operational ownership to enable scale and clarity.* Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field, or equivalent experience.* Strong experience in cybersecurity or data protection–related roles, with responsibility for enterprise‐scale data protection controls.* Demonstrated experience designing, implementing, and operating data loss prevention (DLP) controls across endpoints, email, cloud platforms, and collaboration tools.* Strong technical experience with data classification, labeling, and policy‐based enforcement across structured and unstructured data.* Hands‐on experience implementing and managing encryption technologies (data at rest and in transit), key management, and secure data handling controls.* Experience integrating data protection controls into cloud platforms, SaaS applications, and enterprise collaboration environments.* Experience operating security controls in large, complex, and regulated enterprise environments.* Proven ability to collaborate across engineering, digital, and operations teams to deliver practical and effective data protection outcomes.* Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.* Familiarity with cybersecurity frameworks, regulatory requirements, and risk management practices relevant to pharmaceutical or life sciences organizations.* Professional certifications such as CISSP, CISM, CCSP, or data protection–focused certifications.* Prior leadership experience managing or mentoring data protection engineers or security engineering teams.* Strong understanding of data lifecycle management, including data creation, access, sharing, retention, and secure disposal.* Strong analytical and communication skills, with the ability to clearly articulate data protection risks and design decisions to senior stakeholders.* undefined* No special physical requirements.* Applicants should be capable of working through a personal laptop computer or mobile device for extended periods. #J-18808-Ljbffr