Data Protection Manager

Vice President, Data Protection Manager

Location: Norwood, hybrid, in office 2 days a week

Are you passionate about protecting sensitive data, shaping enterprise-wide security strategy, and making a measurable impact in a highly regulated environment? We're looking for a dynamic and experienced leader to join our Enterprise Risk Management team as Vice President, Data Protection Manager.

In this role, you'll lead the Bank's data protection strategy across privacy, data loss prevention, and records management, playing a critical part in safeguarding customer trust and strengthening our security posture. As part of the Second Line of Defense, you'll partner across the organization to influence risk decisions, enhance controls, and ensure compliance with evolving regulatory expectations.

Reporting to the SVP, Information Security Officer, this is a high-visibility role with regular interaction with senior leadership and the Board.

What You'll Do

Shape the Bank's Data Protection Strategy

Lead enterprise-wide initiatives to protect sensitive customer and business data.

Drive compliance with key regulations, including GLBA, while influencing how the organization adapts to emerging privacy requirements.

Serve as a trusted advisor to leadership on data protection risks and opportunities.

Lead & Evolve Data Loss Prevention

Oversee and enhance the Bank's Data Loss Prevention (DLP) program, ensuring it is both effective and scalable.

Turn data into insight-providing meaningful metrics and trends that inform decision-making.

Lead response efforts to data incidents, ensuring timely, compliant, and well-coordinated actions.

Champion Information Governance

Modernize and manage the Bank's records retention and information governance program.

Partner closely with Legal, Compliance, and business teams to ensure data is properly classified, retained, and disposed of.

Help the organization strike the right balance between risk management and business enablement.

Make an Impact as a Leader

Build, mentor, and inspire a high-performing data protection team.

Collaborate with cross-functional leaders to embed strong data protection practices into everyday operations.

Present insights and recommendations to executive leadership and the Board-shaping the future of the Bank's risk posture.

Requirements:

• Minimum 8 years of experience in data protection, privacy, information security, or risk management.
• Strong understanding of regulatory frameworks (e.g., GLBA) and their real-world application.
• Experience in financial services or another highly regulated industry.
• A strategic mindset with the ability to translate complex risks into clear, actionable insights.
• Proven leadership skills with a track record of building and developing teams.
• Strong communication skills and confidence engaging with senior stakeholders.
• Experience with GRC tools (RSA Archer preferred) and data protection technologies such as DLP.

Why Join Us?

• High-impact role with visibility to executive leadership and the Board
• Opportunity to shape and mature a critical enterprise program
• Collaborative culture that values innovation, ownership, and continuous improvement
• Career growth within a strong and evolving risk and security organization