- Tampa, Florida, United States
- Full-time · Senior
- 5–7 years
Leads the design, implementation, and ongoing management of data-protection and information-security controls across the firm to safeguard sensitive client, attorney, financial, privileged, and firm data.
Compensation
Exempt roles are also performance bonus eligible.
Responsibilities
- Serve as the firm’s subject-matter expert for Data Loss Prevention, information protection, and data-security controls.
- Develop, maintain, and mature a risk-based DLP strategy, governance framework, operating model, and multi-year roadmap.
- Define DLP controls based on data sensitivity, user role, business function, client requirements, regulatory obligations, and firm risk tolerance.
- Assess DLP maturity, identify gaps, prioritize improvements, and report progress through meaningful metrics, dashboards, and executive updates.
- Review SOC escalations and assess alerts based on content, user role, authorization, and normal business workflows.
Requirements
- Nice to have: International experience
- Nice to have: CFE (Certified Fraud Examiner)
- Nice to have: CIPP/US
- Nice to have: CIPM
- Nice to have: CIPT