Director Data Security

The Depository Trust & Clearing Corporation (DTCC); Jersey City (NJ); Hybrid; USD 140,000 - 230,000; Full time

Benefits offered by this job

Competitive compensation

Health and life insurance

Pension/Retirement benefits

Paid Time Off and family care

Hybrid work model (3 onsite / 2 remote

Job summary

The Depository Trust & Clearing Corporation (DTCC) in the United States is seeking a senior Data Protection Leader to expand our data security program across email, endpoints, cloud, and data platforms. You will design, deploy, and operate DTCC’s data protection controls with a focus on DLP, classification, encryption, and AI-proxy safeguards.

You will lead enterprise labeling strategies, drive governance, work with privacy, compliance, insider threat, and data governance teams, and ensure

Qualifications

• Minimum of 10 years of related experience.
• Bachelor's degree preferred and/or equivalent experience.
• Experience owning enterprise-scale data protection capabilities.
• Proven success leading multi-platform DLP, classification, and encryption programs.
• Experience in regulated environments (financial services strongly preferred).

Responsibilities

• Data Protection Ownership: design, deploy, and manage DTCC’s data protection capabilities (DLP, classification, labeling, CASB, DSPM, AI proxies).
• Platform Leadership: provide executive-level technical direction for Data Protection tools (Purview, Zscaler, Proofpoint).
• Classification, DLP & Encryption Strategy: drive enterprise labeling and taxonomy governance; enforce controls.
• Advisory & Secure-by-Design Enablement: advise on new initiatives, cloud migrations, and third-party engagements ensuring appropriate controls.
• Support internal audits and regulatory reviews related to data protection risk.

Skills

Data protection

DLP

Classification

Encryption

Cloud security

AI governance

Education

Bachelor's degree

Tools

Purview

Zscaler

Proofpoint

Job description

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Our Cybersecurity & Resiliency teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of cybersecurity risks

Pay And Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee)

The Impact You Will Have In This Role

Being a member of the IT Cybersecurity Resiliency team, the Data Protection, Director will expand the Data Security program capabilities by collaborating with colleagues across the firm (e.g. Privacy, Compliance, Insider Threat, Data Governance, AI Engineering and others) to confirm existing controls, ownership, breadth of coverage, and maturity while problem solving for potential gaps.

A combination of strong technical skills, problem solving/anticipation skills, and strong people skills is needed to be successful in this role. If you enjoy challenging work, high visibility, and making things better then this is an opportunity to consider.

Your Primary Responsibilities

Data Protection Control Ownership

• Design, deployment, and lifecycle management of DTCC’s data protection capabilities, including DLP, classification and labeling, CASB, DSPM, AI proxy controls, and related technical solutions
• Own and operate DTCC’s data protection control framework across: Email and collaboration platforms, Endpoint and web egress, Cloud and SaaS services, AI and emerging data channels
• Ensure consistent enforcement of classification, DLP, and encryption intent across all control points.
• Work with Data Protection operations and content engineering to support tuning, and automation to ensure consistent protection across email, endpoints, collaboration tools, web, cloud, SaaS, and data platforms.
• Ensure control design aligns with DTCC’s data‑centric, context‑driven security principles and minimizes unnecessary business friction.

Platform Leadership

• Provide executive‑level technical leadership and direction for Data Protection solutions including (not limited to) Purview, Zscaler, Proofpoint and other DLP tools.

Classification, DLP & Encryption Strategy

• Drive DTCC’s enterprise classification and labeling strategy, including: Taxonomy governance, SIT / classifier standards, Label inheritance and lifecycle
• Lead the transition from pattern‑only DLP to context‑and label‑driven enforcement
• Ensure data protection controls meet regulatory, audit, and risk management expectations for client, regulated, and confidential data.
• Maintain clear, auditable evidence of control effectiveness through metrics, reporting, and documentation.
• Support internal audits, regulatory reviews, and management reporting related to data protection risk and control posture.

Advisory & Secure‑by‑Design Enablement

• Provide technical data protection advisory to technology and business teams for new initiatives, system changes, cloud migrations, AI use cases, and third‑party engagements.
• Ensure appropriate controls (e.g., encryption, masking, tokenization, access restrictions) are embedded before go‑live.
• Serve as a trusted advisor who enables the business to use data confidently and securely.

Qualifications

• Minimum of 10 years of related experience
• Bachelor's degree preferred and/or equivalent experience

Talents Needed For Success

• Experience owning enterprise‑scale data protection capabilities.
• Proven success leading multi‑platform DLP, classification, and encryption programs.
• Demonstrated ability to translate regulatory and policy requirements into precise, enforceable technical controls.
• Experience accountable for outcomes, not just strategy or advisory input.
• Experience operating in highly regulated environments (financial services strongly preferred).

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.