Information Protection Specialist (Data Governance)

Zs Associates; Pune District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

ZS Associates seeks an Information Protection Specialist in Enterprise to establish, manage, and scale our data governance and security framework across the organization. You will drive governance policies, data classification, and encryption strategies while ensuring regulatory alignment and risk mitigation.

The role combines strategic leadership with technical oversight of tooling and processes, collaborating with senior stakeholders to embed a culture of data protection and governance.

Qualifications

• Experience with data protection and governance in enterprise environments.
• Familiarity with data discovery, classification, encryption, and DLP concepts is a plus.

Responsibilities

• Define and lead enterprise data protection and governance strategy aligned with business goals and regulatory mandates.
• Establish a comprehensive framework of policies, standards, and controls for data security and lifecycle management.
• Collaborate with executives to embed a culture of data protection and governance across the organization.
• Ensure compliance with regulatory and privacy frameworks (GDPR, HIPAA, CCPA, PCI DSS, SOX).
• Lead training and awareness to elevate data security and governance across technical and non-technical teams.

Job description

ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you’ll work side‑by‑side with a powerful collective of thinkers and experts shaping life‑changing solutions for patients, caregivers and consumers, worldwide. ZSers drive impact by bringing a client‑first mentality to each and every engagement. We partner collaboratively with our clients to develop custom solutions and technology products that create value and deliver company results across critical areas of their business. Bring your curiosity for learning, bold ideas, courage and passion to drive life‑changing impact to ZS.

What you'll do: Information Protection Specialist in Enterprise will establish, manage, and scale our enterprise‑wide data security and governance framework.

This role uniquely combines strategic leadership — shaping governance policies, frameworks, and organizational adoption — with technical oversight of governance and data security tools such as data discovery, DSPM (Data Security Posture Management), data loss prevention, data classification, and encryption frameworks.

The role will ensure data is trusted, secure, compliant, and usable across the organization to drive decision‑making, innovation, and regulatory alignment.

Strategic Leadership (Data Security & Governance) focus

• Define and lead the enterprise data protection and governance strategy in alignment with business objectives and regulatory mandates.
• Establish a comprehensive framework, including policies, standards, and controls for data security, ownership, stewardship, and lifecycle management.
• Collaborate with executives and stakeholders to embed a culture of data protection and governance
• Ensure compliance with regulatory and privacy frameworks (GDPR, HIPAA, CCPA, PCI DSS, SOX).
• Define and track key KPIs that measure data security and governance maturity, risk posture, and policy adoption.
• Lead training & awareness efforts to elevate awareness across technical and non‑technical communities.

Technical Oversight (Tooling & Security Enablement Focus)

• Data Governance : Implement and oversee data governance capabilities governing discovery, classification, and monitor sensitive data across cloud, SaaS, and hybrid environments.
• Data Classification & Cataloging: Define standards for sensitive data labeling and enforce consistent classification through data catalogs , data lineage and automated workflows.
• Data Protection: Design, implement and ensure robust data protection ensuring sensitive data is protected from exfiltration
• Integration with Security Stack: Partner with InfoSec to integrate governance tools with DLP, SIEM, IAM, API security, and cloud‑native security controls.
• Tool Ownership: Evaluate, select, and