Information Protection Specialist (Data Governance)

Zs Associates; Mumbai; Hybrid; INR 4,000,000 - 5,500,000; Full time

Job summary

ZS Associates is seeking an Information Protection Specialist in Enterprise to establish and scale our data security and governance framework across cloud, SaaS, and hybrid environments. You will lead governance strategy, policies, and controls while ensuring regulatory alignment to GDPR, HIPAA, PCI DSS, and SOX.

You will collaborate with executives to embed a culture of data protection, define KPIs, and drive training across technical and non-technical teams to elevate awareness and adoption.

Qualifications

• Experience in establishing and scaling data governance and security programs.
• Hands-on experience with data discovery, DSPM, DLP, data classification, and encryption frameworks.
• Ability to define KPIs and partner with executives to drive governance culture.
• Knowledge of regulatory privacy frameworks (GDPR, HIPAA, PCI DSS).

Responsibilities

• Define and lead the enterprise data protection and governance strategy.
• Build a comprehensive framework with policies, standards, and controls.
• Collaborate with executives to embed data protection into culture.
• Ensure compliance with regulatory and privacy frameworks.
• Define and track KPIs for data security maturity and policy adoption.
• Lead training and awareness across technical and non-technical teams.

Skills

Data governance

Data security

Data discovery

Data classification

DLP

SIEM

IAM

Tools

Cloud security tools

Job description

ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you’ll work side‑by‑side with a powerful collective of thinkers and experts shaping life‑changing solutions for patients, caregivers and consumers, worldwide. ZSers drive impact by bringing a client‑first mentality to each and every engagement. We partner collaboratively with our clients to develop custom solutions and technology products that create value and deliver company results across critical areas of their business. Bring your curiosity for learning, bold ideas, courage and passion to drive life‑changing impact to ZS.

What you'll do: Information Protection Specialist in Enterprise will establish, manage, and scale our enterprise‑wide data security and governance framework.

This role uniquely combines strategic leadership — shaping governance policies, frameworks, and organizational adoption — with technical oversight of governance and data security tools such as data discovery, DSPM (Data Security Posture Management), data loss prevention, data classification, and encryption frameworks.

The role will ensure data is trusted, secure, compliant, and usable across the organization to drive decision‑making, innovation, and regulatory alignment.

Strategic Leadership (Data Security & Governance) focus

• Define and lead the enterprise data protection and governance strategy in alignment with business objectives and regulatory mandates.
• Establish a comprehensive framework, including policies, standards, and controls for data security, ownership, stewardship, and lifecycle management.
• Collaborate with executives and stakeholders to embed a culture of data protection and governance
• Ensure compliance with regulatory and privacy frameworks (GDPR, HIPAA, CCPA, PCI DSS, SOX).
• Define and track key KPIs that measure data security and governance maturity, risk posture, and policy adoption.
• Lead training & awareness efforts to elevate awareness across technical and non‑technical communities.

Technical Oversight (Tooling & Security Enablement Focus)

• Data Governance : Implement and oversee data governance capabilities governing discovery, classification, and monitor sensitive data across cloud, SaaS, and hybrid environments.
• Data Classification & Cataloging: Define standards for sensitive data labeling and enforce consistent classification through data catalogs , data lineage and automated workflows.
• Data Protection: Design, implement and ensure robust data protection ensuring sensitive data is protected from exfiltration
• Integration with Security Stack: Partner with InfoSec to integrate governance tools with DLP, SIEM, IAM, API security, and cloud‑native security controls.
• Tool Ownership: Evaluate, select, and