Data Security Operations Lead

Black & Veatch Corporation; Cary (NC); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Hybrid work options

Job summary

Black & Veatch Family of Companies in Cary, NC, seeks a Data Security Operations Lead to drive the development and management of a comprehensive data security program across cloud, SaaS, and on-premises environments. You will lead data discovery, classification, governance, and incident response initiatives to protect sensitive data and reduce risk.

The role requires strong leadership, experience with DSPM, DLP, DDR, insider risk, and regulatory alignment (GDPR, CCPA, GLBA).

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or related field, or equivalent experience.
• 10+ years in cybersecurity with at least 3 years in a leadership role focused on data security or DSPM.
• Hands-on experience with data discovery, classification, DLP, and access governance tools.
• Ability to design and implement data security programs and drive enterprise initiatives.

Responsibilities

• Oversee data asset discovery, mapping, and real-time inventory across cloud, SaaS, and on‑premises environments.
• Collaborate with IT and business units to ensure visibility into data flows and locations of sensitive data.
• Maintain DSPM framework and continuously improve data security posture.
• Identify risks (misconfigurations, excessive permissions, plaintext data) and provide remediation recommendations.
• Develop and enforce DDR, DLP policies, and real-time monitoring controls.
• Coordinate with incident response teams to mitigate risk and improve resilience.
• Ensure regulatory alignment with GDPR, CCPA, GLBA and internal privacy policies.

Skills

Data security

DSPM

DLP

DDR

Cloud security

Leadership

Communication

Education

Bachelor's degree in CS or related

Security certifications (CISSP/CISM)

Tools

Data discovery tools

DLP tools

Access governance tools

Job description

Company: Black & Veatch Family of Companies

Location: Cary, NC, US; Houston, TX, US; Blue Ash, OH, US; Overland Park, KS, US

Data Security Operations Lead

Opportunity

We are seeking an experienced Data Security Operations Lead to spearhead our organization’s data security initiatives. This critical role will drive the development, implementation, and management of a comprehensive data security program, ensuring the protection of sensitive data across cloud, SaaS, and on-premises environments. The ideal candidate will have a deep understanding of modern data security challenges, including those driven by AI and cloud adoption, and will lead efforts to enhance visibility, mitigate risks, and ensure compliance. The role requires expertise in data discovery, classification, protection, governance, insider risk, and incident response.

Team

Black & Veatch’s Business Enablement consists of critical groups that help enable the organizations people, projects, and businesses to be as successful as possible. Functions in this group include Digital & Information Technology, Global Finance, Global Human Resources, Legal, Risk Management, and Government Affairs and Real Estate and Building Services.

Key Responsibilities

• Oversee the continuous identification and mapping of all data assets across diverse environments, including cloud (IaaS, PaaS, SaaS), databases, and on-premises systems.
• Utilize available tools to discover data stores and maintain a real-time inventory of sensitive data, ensuring no blind spots in the data landscape.
• Collaborate with IT and business units to understand data flows and ensure comprehensive visibility into where critical data resides.
• Maintain and support a robust Data Security Posture Management (DSPM) framework to continuously assess and improve the organization’s data security posture.
• Identify and prioritize risks, such as misconfigurations, excessive permissions, or plaintext data storage, and provide actionable remediation recommendations.
• Monitor data stores for vulnerabilities and ensure proactive measures to reduce the attack surface across all environments.
• Develop and enforce Data Loss Prevention (DLP) policies to prevent unauthorized access, exfiltration, or misuse of sensitive data.
• Implement and manage real-time monitoring and controls to detect and block sensitive data from leaving secure environments and minimize false positives.
• Identify compromised instances, insider risk, or misconfigurations, providing context-rich insights for rapid incident response.
• Lead the development of a proactive Data Detection & Response (DDR) strategy to detect and respond to data security incidents in real-time.
• Coordinate with incident response teams to mitigate risk and ensure operational resilience.
• Ensure the data security program aligns with industry regulations (e.g.: GDPR, CCPA, GLBA) and internal privacy policies.
• Provide actionable insights to stakeholders to maintain regulatory compliance without disrupting business operations.
• Implement controls to ensure sensitive data is only accessible to authorized AI systems, reducing risk associated with AI-driven data sprawl.
• Align data security initiatives with business objectives through coordination and cooperation.
• Communicate effectively with leadership, providing clear, data driven insights into the organization’s security posture and improvement strategies.
• Foster a culture of continuous learning, ensuring the program adapts to evolving risks and technological advancements.

Minimum Qualifications

• Bachelor’s degree in computer science, Cybersecurity, Information systems or related field or equivalent experience.
• 10+ years in Cybersecurity with at least 3 years in a leadership role focused on data security or DSPM.
• Proven experience in designing and implementing data security programs.
• Hands‑on experience with data discovery, classification, DLP, and access governance tools.
• All applicants must be able to complete pre‑employment onboarding requirements (if selected) which may include any or all of the following: criminal or civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.

Preferred Qualifications

Education:

• Bachelor’s degree in computer science, Cybersecurity, Information systems or related field or equivalent experience.
• Certifications (e.g.: CISSP, CISM, CISA) are preferred.

Experience:

• 7+ years in Cybersecurity with at least 3 years in a leadership role focused on data security or DSPM.
• Proven experience in designing and implementing data security programs.
• Hands‑on experience with data discovery, classification, DLP, and access governance tools.

Skills

• Experience in modern data security frameworks, including DSPM, DLP, and DDR.
• Strong ability to improvise to solve complex problems.
• Strong communication skills with both technical and executive audiences.
• Ability to translate technical risks into business impacts for executive stakeholders.
• Excellent project management, time management, and organizational skills.

Certifications

Must hold at least 1 certification such as CISSP, CISM, CISA, CRISC, CIPP or similar privacy certifications.

Work Environment / Physical Demands

Hybrid or flexible work options may be offered after the first 90 days of employment based upon manager discretion, job performance and work assignments.

Benefits

Our comprehensive benefits portfolio is a key component of this commitment and offers an array of health care benefits including medical, dental and vision insurances along with disability and a robust wellness program. To support a healthy work‑life balance, we offer flexible work schedules, paid vacation, holiday time, sick time, and dependent sick time. A variety of additional benefits are available, including a company‑matched 401k plan, adoption reimbursement, tuition reimbursement, vendor discounts, an employment referral program, AD&D insurance, pre‑taxed accounts, voluntary legal plan and the B&V Credit Union. Professionals may also be eligible for a performance‑based bonus program.

Equal Employment Opportunity

BVH, Inc., its subsidiaries and its affiliated companies, complies with all Equal Employment Opportunity (EEO) laws and regulations. Black & Veatch does not discriminate on the basis of age, race, religion, color, sex, national origin, marital status, genetic information, sexual orientation, gender identity and expression, disability, veteran status, pregnancy status or other status protected by law.

Notice to External Search Firms

Black & Veatch does not accept unsolicited resumes and will not be obligated to pay a placement fee for unsolicited resumes. Black & Veatch Talent Acquisition engages with search firms directly for hiring needs.