Manager – Data Governance & Protection Engineering

Kroll; Bengaluru; Hybrid; INR 1,800,000 - 2,800,000; Full time

Job summary

Kroll is seeking a Manager of Data Governance & Protection Engineering in Bangalore to lead the design, implementation, and operation of data governance and protection platforms across cloud and on‑prem environments.

You will drive DSPM, DLP, privacy operations, and governance technology adoption, while building a scalable India-based delivery capability and mentoring consultants across governance and data protection disciplines.

Qualifications

• 5–8+ years in Data Governance, Data Protection, DSPM, DLP, Privacy Operations or Cybersecurity engineering.
• Prior consulting experience preferred in Big4 or enterprise tech environments.
• Experience supporting offshore or global delivery models.

Responsibilities

• Lead India-based delivery and engineering team for DSPM, DLP, privacy operations, and governance tech.
• Mentor junior practitioners and oversee offshore/onshore delivery models.
• Define delivery standards, methodologies, and reusable accelerators.
• Coordinate with global teams to ensure scalable, consistent outcomes.
• Support governance architecture design across cloud, hybrid, and on‑prem environments.
• Drive client engagements and ensure high-quality delivery outcomes.

Skills

DSPM

DLP

Privacy Operations

Governance

Tools

OneTrust

BigID

Securiti

Microsoft Purview

ServiceNow

Varonis

Symmetry Systems

Cyera

Zscaler

Microsoft DLP

Job description

Manager – Data Governance & Protection Engineering

Cybersecurity

Cybersecurity | Bangalore, India | 21015128

Manager – Data Governance & Protection Engineering

Cyber, Data, and Resilience Practice

Kroll is seeking a Manager, Data Governance & Protection Engineering to help build and scale a high-performing global delivery capability focused on Data Security Posture Management (DSPM), Data Loss Prevention (DLP), Privacy Operations, and enterprise data governance technologies. This role combines technical leadership, implementation oversight, and offshore team development across enterprise cybersecurity, privacy, and data protection programs.
This is a client-facing consulting role responsible for leading technical delivery initiatives while helping establish and mature a scalable India-based delivery and engineering capability supporting global client engagements. The ideal candidate will possess strong hands-on experience across multiple governance, privacy, and data protection technology stacks while also demonstrating leadership capabilities in team development, operational scaling, and delivery management.
You will work closely with cybersecurity, privacy, cloud, infrastructure, and governance leaders to design, implement, integrate, and operationalize enterprise data protection and governance capabilities across complex regulated environments.

RESPONSIBILITIES – Leadership & Global Delivery Development

Support development and scaling of an India-based delivery and engineering team focused on DSPM, DLP, privacy operations, and governance technology implementation.

Assist with hiring, mentoring, onboarding, and developing technical practitioners across governance and data protection disciplines.

Establish delivery standards, implementation methodologies, operational procedures, and reusable technical accelerators.

Coordinate across global teams to support efficient delivery execution, knowledge transfer, and operational consistency.

Support resource planning, workstream coordination, and offshore/onshore delivery collaboration models.

Foster a culture of technical excellence, accountability, innovation, and continuous learning.

RESPONSIBILITIES – Data Governance & Protection Engineering

Lead or support implementation and operationalization of enterprise data governance and protection platforms across cloud, hybrid, and on-premise environments.

Design and implement governance and protection capabilities including data discovery, classification, DSPM, DLP, retention, access governance, privacy operations workflows, and sensitive data monitoring.

Support integration of governance and protection tooling into enterprise security, CMDB, GRC, IAM, and IT ecosystems.

Assist with governance architecture design and operationalization across structured and unstructured data environments.

Support engineering automation and orchestration initiatives that improve scalability and operational efficiency.

RESPONSIBILITIES – Privacy Operations & Governance Technology

Support operational privacy and governance programs including ROPAs, PIAs/DPIAs, consent management, data subject rights workflows, data mapping, and risk management workflows.

Lead or support implementation and integration of privacy and governance technologies including OneTrust, BigID, Securiti, ServiceNow, Microsoft Purview, Varonis, Symmetry Systems, Cyera, and Zscaler.

Assist clients with workflow engineering, governance reporting, operational metrics, and process optimization initiatives.

RESPONSIBILITIES – Client Engagement & Delivery

Lead technical workstreams across data governance, DSPM, DLP, and privacy transformation engagements.

Conduct technical assessments, architecture reviews, governance maturity evaluations, and implementation planning activities.

Translate client business, regulatory, privacy, and cybersecurity requirements into scalable technical solutions and operational workflows.

Participate in stakeholder workshops, architecture discussions, and executive status reporting.

Ensure high-quality delivery outcomes, documentation standards, and implementation consistency across engagements.

Support proposals, solution development, staffing discussions, and technical solution positioning.

RESPONSIBILITIES – Risk, Compliance & Security Alignment

Support client alignment to regulatory and industry frameworks including GDPR, CCPA/CPRA, HIPAA, GLBA, NYDFS 500, SEC/FINRA, NIST, and ISO frameworks.

Assist clients with operationalizing governance and protection controls related to sensitive data protection, retention, access governance, monitoring, and incident response.

Support development of governance KPIs, risk dashboards, and operational reporting capabilities.

REQUIREMENTS – Experience

5–8 years of experience in Data Governance, Data Protection, DSPM, DLP, Privacy Operations, Cybersecurity Engineering, GRC Technology, or Technology Consulting.

Prior consulting experience strongly preferred, ideally within Big 4 consulting, cybersecurity consulting firms, or enterprise technology consulting environments.

Experience supporting offshore or global delivery models preferred.

Demonstrated experience leading technical workstreams and mentoring junior technical resources.

Experience implementing enterprise governance, privacy, or security technologies in regulated environments.

REQUIREMENTS – Technical Skills

Hands-on or advisory experience with governance and protection technologies such as BigID, Securiti, Microsoft Purview, OneTrust, ServiceNow, Varonis, Symmetry Systems, Cyera, Zscaler, and Microsoft DLP.

Understanding of DSPM architectures, DLP engineering, privacy operations workflows, data classification, lineage, metadata management, CMDB integration, and IAM concepts.

Familiarity with cloud platforms including AWS, Azure, and GCP.

Experience with APIs, workflow automation, or governance orchestration capabilities preferred.

Exposure to Agile, Scrum, Jira, or DevSecOps delivery methodologies preferred.

Certifications (Preferred)

CISSP

CISM or CRISC

CIPP/US or CIPP/E

CDMP

Microsoft Security or Purview certifications

ServiceNow certifications

AWS, Azure, or GCP cloud certifications

SAFe, Scrum, or Agile certifications

Strong technical leadership and mentoring capabilities.

Ability to balance strategic governance thinking with hands‑on technical delivery.

Excellent communication skills across technical and executive audiences.

Strong organizational and delivery management skills.

Collaborative and client-focused mindset.

Passion for building scalable governance and protection capabilities.

Interest in emerging governance, privacy, DSPM, and data protection technologies.

Success Metrics

Successful establishment and scaling of offshore governance and protection delivery capabilities.

High-quality implementation and operationalization of governance, DSPM, DLP, and privacy technology solutions.

Development of reusable technical accelerators, standards, and methodologies.

Strong client satisfaction and delivery execution outcomes.

Team capability growth, technical mentorship, and certification advancement.

Contributions to scalable cross-functional governance and data protection solutions within the practice.