Sr Manager Information Security

Job description

Job Description: Roles and Responsibilities Lead and develop a high-performing team that lives DXC’s values: Deliver, Do the right thing, Care, Collaborate, and Community. Own the data protection strategy and roadmap, including the projects that deliver it, and set priorities and milestones with senior leadership. Direct the design and implementation of data protection controls across business processes, with a focus on protecting intellectual property and sensitive data. Establish and govern data classification and sensitivity standards, and oversee the identification, classification, and protection of structured and unstructured data across cloud and on-premises environments. Lead Data Security Posture Management (DSPM) efforts to discover, inventory, and assess sensitive data across multi-cloud and SaaS environments, and to reduce exposure from over-permissioned access and shadow data. Define controls and governance for AI systems that process or generate company data, including data use in model training, retrieval-augmented generation, prompt and output handling, and third-party AI services. Ensure compliance with global data privacy and AI frameworks, including GDPR, and other state and national privacy laws, ITAR, NIST CSF and NIST AI RMF, and ISO/IEC 42001 where applicable, and translate their requirements into practical controls. Lead audit and assessment readiness, owning playbooks, evidence, and responses to internal audit, external auditors, and customer reviews. Produce executive-level reports and presentations on data protection, privacy, and AI risk that support investment and risk decisions. Approve and oversee knowledge articles, FAQs, procedures, and standards, and ensure they stay current. Oversee task tracking and stakeholder communication through tools such as Azure DevOps, with clear reporting on progress and risk. Sponsor and deliver training programs on data protection, privacy, and responsible AI use across the company. Coordinate with Internal Audit, Legal, Communications, and business leaders on data protection matters. Skills and Attributes for Success Lead by example in applying DXC’s values, and build accountability and trust within the team. Strong people leadership: hire, coach, develop, and performance-manage a team of analysts and engineers. Expertise in audit readiness, governance, and documentation, with the ability to drive process improvement across teams. Working knowledge of IP protection strategies, including classification of trade secrets and proprietary code, access governance, and exfiltration prevention. Experience with AI security and governance concepts, including model and data lineage, AI usage policies, and risks such as data leakage through prompts, training data exposure, and unauthorized AI tools. Proficiency with Microsoft 365 and Azure security services, and familiarity with multi-cloud environments. Requirements Bachelor’s degree in computer science, Information Systems Management, Engineering, or a similar discipline, or equivalent experience. Minimum of 6 years of experience in data protection, information security, or privacy, including at least 2 years in a leadership or people management role. Hands-on experience with data protection technologies, including data discovery, classification and labeling, data inventory, CASB, Microsoft Purview, information rights management, and data loss prevention. Experience managing Microsoft 365 DLP, Azure Information Protection, Insider Risk Management, Defender for Cloud Apps, Security Compliance, and Secure Score. Experience with DSPM platforms and multi-cloud data security. Working knowledge of data protection and privacy frameworks, including GDPR, HIPAA, NIST CSF, NIST AI RMF, and ITAR. Experience governing AI systems or AI-related data risk, and familiarity with emerging AI regulation and standards. Experience with IT service management and service desk integration. Excellent written and verbal communication skills, with the ability to present to executive audiences. Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $165,500 - $307,300. Full-time hires are eligible to participate in the DXC benefit program.  DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off. At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive. If you are an applicant from the United States, Guam, or Puerto Rico DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below. We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below. Postings Link Disability Accommodations If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email. Please note: DXC will respond only to requests for accommodations due to a disability. Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.