D

DXC Technology

Global IT services for enterprise modernization

Senior Manager Information Security

Security Governance, Risk & CompliancePosted on Nov 12
Full-timeWashington, DC, USA$165.5k - $307.3kIn-person

About the Job

Requirements

  • A bachelor's degree in computer science, Information Systems Management, Engineering, or a similar discipline, or equivalent experience.
  • At least 6 years of experience in data protection, information security, or privacy, including at least 2 years in a leadership or people-management role.
  • Hands-on experience with data protection technologies, including data discovery, classification and labeling, data inventory, Cloud Access Security Broker (CASB), Microsoft Purview, information rights management, and data loss prevention.
  • Experience managing Microsoft 365 Data Loss Prevention, Azure Information Protection, Insider Risk Management, Defender for Cloud Apps, Security Compliance, and Secure Score.
  • Experience with Data Security Posture Management platforms and multi-cloud data security.
  • Working knowledge of data protection and privacy frameworks, including GDPR, HIPAA, NIST CSF, NIST AI RMF, and ITAR.
  • Experience governing AI systems or AI-related data risk, and familiarity with emerging AI regulation and standards.
  • Experience with IT service management and service desk integration.
  • Strong written and verbal communication skills, including the ability to present to executive audiences.
  • Expertise in audit readiness, governance, and documentation, with the ability to drive process improvement across teams.
  • Working knowledge of intellectual property protection strategies, including classification of trade secrets and proprietary code, access governance, and exfiltration prevention.
  • Experience with AI security and governance concepts, including model and data lineage, AI usage policies, and risks such as data leakage through prompts, training data exposure, and unauthorized AI tools.
  • Proficiency with Microsoft 365 and Azure security services, and familiarity with multi-cloud environments.

Responsibilities

  • Lead and develop a high-performing team that applies the company's values.
  • Own the data protection strategy and roadmap, including projects that deliver it, and set priorities and milestones with senior leadership.
  • Direct the design and implementation of data protection controls across business processes, focusing on protecting intellectual property and sensitive data.
  • Establish and govern data classification and sensitivity standards, and oversee identification, classification, and protection of structured and unstructured data across cloud and on-premises environments.
  • Lead Data Security Posture Management efforts to discover, inventory, and assess sensitive data across multi-cloud and SaaS environments, and reduce exposure from over-permissioned access and shadow data.
  • Define controls and governance for AI systems that process or generate company data, including data use in model training, retrieval-augmented generation, prompt and output handling, and third-party AI services.
  • Ensure compliance with global data privacy and AI frameworks, including GDPR, applicable state and national privacy laws, ITAR, NIST CSF, NIST AI RMF, and ISO/IEC 42001 where applicable, and translate requirements into practical controls.
  • Lead audit and assessment readiness, owning playbooks, evidence, and responses to internal audit, external auditors, and customer reviews.
  • Produce executive-level reports and presentations on data protection, privacy, and AI risk to support investment and risk decisions.
  • Approve and oversee knowledge articles, FAQs, procedures, and standards, and ensure they remain current.
  • Oversee task tracking and stakeholder communication through tools such as Azure DevOps, with clear reporting on progress and risk.
  • Sponsor and deliver company-wide training programs on data protection, privacy, and responsible AI use.
  • Coordinate with Internal Audit, Legal, Communications, and business leaders on data protection matters.
  • Hire, coach, develop, and performance-manage a team of analysts and engineers.

About the Company

DXC Technology

Global IT services for enterprise modernization

DXC Technology provides IT services to large enterprises, helping them manage and modernize mission-critical systems. It offers consulting, system integration, and managed services that are typically delivered under long-term contracts. The core offering is the Enterprise Technology Stack, which modernizes IT infrastructure, optimizes data architectures, and ensures security and scalability across public, private, and hybrid cloud environments. By applying this stack, DXC helps clients run reliable and scalable IT operations while migrating workloads to the cloud and strengthening data governance. The company differentiates itself with a global reach, a large Fortune 500 client base, and a track record of long-term partnerships, coupled with commitments to sustainability and corporate responsibility. The goal is to be a trusted partner that enables enterprises to operate, secure, and evolve their IT environments efficiently and effectively.

Company size
10,001+
Company stage
IPO
Headquarters
McLean, VA
Founded
2017

Recently Posted Jobs

Explore more opportunities at DXC Technology

See more jobs