Manager - Data Governance & Protection Engineering

Kroll is seeking a Manager, Data Governance & Protection Engineering to help build and scale a high-performing global delivery capability focused on Data Security Posture Management (DSPM), Data Loss Prevention (DLP), Privacy Operations, and enterprise data governance technologies. This role combines technical leadership, implementation oversight, and offshore team development across enterprise cybersecurity, privacy, and data protection programs.This is a client-facing consulting role responsible for leading technical delivery initiatives while helping establish and mature a scalable India-based delivery and engineering capability supporting global client engagements. The ideal candidate will possess strong hands-on experience across multiple governance, privacy, and data protection technology stacks while also demonstrating leadership capabilities in team development, operational scaling, and delivery management.You will work closely with cybersecurity, privacy, cloud, infrastructure, and governance leaders to design, implement, integrate, and operationalize enterprise data protection and governance capabilities across complex regulated environments.

• Support development and scaling of an India-based delivery and engineering team focused on DSPM, DLP, privacy operations, and governance technology implementation.
• Assist with hiring, mentoring, onboarding, and developing technical practitioners across governance and data protection disciplines.
• Establish delivery standards, implementation methodologies, operational procedures, and reusable technical accelerators.
• Coordinate across global teams to support efficient delivery execution, knowledge transfer, and operational consistency.
• Support resource planning, workstream coordination, and offshore/onshore delivery collaboration models.
• Foster a culture of technical excellence, accountability, innovation, and continuous learning.

• Lead or support implementation and operationalization of enterprise data governance and protection platforms across cloud, hybrid, and on-premise environments.
• Design and implement governance and protection capabilities including data discovery, classification, DSPM, DLP, retention, access governance, privacy operations workflows, and sensitive data monitoring.
• Support integration of governance and protection tooling into enterprise security, CMDB, GRC, IAM, and IT ecosystems.
• Assist with governance architecture design and operationalization across structured and unstructured data environments.
• Support engineering automation and orchestration initiatives that improve scalability and operational efficiency.

• Support operational privacy and governance programs including ROPAs, PIAs/DPIAs, consent management, data subject rights workflows, data mapping, and risk management workflows.
• Lead or support implementation and integration of privacy and governance technologies including OneTrust, BigID, Securiti, ServiceNow, Microsoft Purview, Varonis, Symmetry Systems, Cyera, and Zscaler.
• Assist clients with workflow engineering, governance reporting, operational metrics, and process optimization initiatives.

• Lead technical workstreams across data governance, DSPM, DLP, and privacy transformation engagements.
• Conduct technical assessments, architecture reviews, governance maturity evaluations, and implementation planning activities.
• Translate client business, regulatory, privacy, and cybersecurity requirements into scalable technical solutions and operational workflows.
• Participate in stakeholder workshops, architecture discussions, and executive status reporting.
• Ensure high-quality delivery outcomes, documentation standards, and implementation consistency across engagements.
• Support proposals, solution development, staffing discussions, and technical solution positioning.

• Support client alignment to regulatory and industry frameworks including GDPR, CCPA/CPRA, HIPAA, GLBA, NYDFS 500, SEC/FINRA, NIST, and ISO frameworks.
• Assist clients with operationalizing governance and protection controls related to sensitive data protection, retention, access governance, monitoring, and incident response.
• Support development of governance KPIs, risk dashboards, and operational reporting capabilities.

• 5-8 years of experience in Data Governance, Data Protection, DSPM, DLP, Privacy Operations, Cybersecurity Engineering, GRC Technology, or Technology Consulting.
• Prior consulting experience strongly preferred, ideally within Big 4 consulting, cybersecurity consulting firms, or enterprise technology consulting environments.
• Experience supporting offshore or global delivery models preferred.
• Demonstrated experience leading technical workstreams and mentoring junior technical resources.
• Experience implementing enterprise governance, privacy, or security technologies in regulated environments.

• Hands-on or advisory experience with governance and protection technologies such as BigID, Securiti, Microsoft Purview, OneTrust, ServiceNow, Varonis, Symmetry Systems, Cyera, Zscaler, and Microsoft DLP.
• Understanding of DSPM architectures, DLP engineering, privacy operations workflows, data classification, lineage, metadata management, CMDB integration, and IAM concepts.
• Familiarity with cloud platforms including AWS, Azure, and GCP.
• Experience with APIs, workflow automation, or governance orchestration capabilities preferred.
• Exposure to Agile, Scrum, Jira, or DevSecOps delivery methodologies preferred.

• CISSP
• CISM or CRISC
• CIPP/US or CIPP/E
• CDMP
• Microsoft Security or Purview certifications
• ServiceNow certifications
• AWS, Azure, or GCP cloud certifications
• SAFe, Scrum, or Agile certifications

• Strong technical leadership and mentoring capabilities.
• Ability to balance strategic governance thinking with hands-on technical delivery.
• Excellent communication skills across technical and executive audiences.
• Strong organizational and delivery management skills.
• Collaborative and client-focused mindset.
• Passion for building scalable governance and protection capabilities.
• Interest in emerging governance, privacy, DSPM, and data protection technologies.

• Successful establishment and scaling of offshore governance and protection delivery capabilities.
• High-quality implementation and operationalization of governance, DSPM, DLP, and privacy technology solutions.
• Development of reusable technical accelerators, standards, and methodologies.
• Strong client satisfaction and delivery execution outcomes.
• Team capability growth, technical mentorship, and certification advancement.
• Contributions to scalable cross-functional governance and data protection solutions within the practice.

#LI-SP1

#LI-Hybrid