Data Loss Prevention Program Director

DATA LOSS PREVENTION PROGRAM DIRECTOR

INFORMATION SYSTEMS – NEW YORK

 

COTY is looking for smart leaders who are fast and passionate. We’re Coty, one of the world’s largest beauty companies with a portfolio of iconic brands across fragrance, color cosmetics, and skin and body care. Coty serves consumers around the world, selling prestige and mass market products in more than 130 countries and territories. Coty and our brands empower people to express themselves freely, creating their own visions of beauty; and we are committed to making a positive impact on the planet.

 

The Data Loss Prevention (DLP) program within Coty involves a set of IT / Regulatory systems and processes to prevent Coty sensitive data being lost (or ‘leaking’) from Coty. It is part of the cybersecurity suite of systems – and unlike security systems like firewalls and access controls which prevent bad actors getting in, DLP recognizes that unfortunately internal personnel also form part of the risk landscape, by risky (and usually inadvertent) practices that puts Coty data at risk (eg. sending work emails to their Gmail to be easier to read on the train home). The DLP program, once implemented, will monitor Microsoft suite (MS365 - Outlook email/Teams/SharePoint/OneDrive) and implement a set of policies/rules to detect and prevent actions that put Coty sensitive data at risk. 

 

The DLP Program Director will have overall responsibility for the DLP Program globally at Coty, reporting to the Head of Information Security and Compliance. The role requires working across all departments at Coty, including Coty IT (for technical running of the DLP systems), HR and Legal (for investigations and escalations of DLP alerts/breaches) and well as all main Coty functions through the DLP Department Lead group.

 

THE ROLE

 

In this role you will be responsible to:

• Manage and evolve the DLP Program over time according to business priorities and strategy
• Hold and manage the budget for the DLP Program.
• Lead the DLP team including successful execution of the program and development of team
• Communicate and champion the DLP program to all personnel at Coty
• Coordinate and chair DLP Governance meetings with key business departments and senior leadership at Coty
• Negotiate and implement DLP requirements coming from Coty departments through the DLP Department Lead group
• Operate the DLP Program day-to-day and train/supervise other DLP administrators in daily DLP program operation, including:
  • Create and refine DLP classifiers (sensitive information types)
  • Define and update DLP Policies (rules associated with classifiers)
  • Manage DLP alerts from DLP Policy matches, including escalations and investigations
  • Define KPIs for the DLP Program
  • Design and run reports to measure KPIS and system performance
  • Develop and implement the DLP training program including working with third parties

 

 QUALIFICATIONS

 

We’d love to see candidates who have:

 

Essential:

• Four-year degree in Information Security, Law or related field
• 10+ years of work experience within a field such as Data Privacy, Cyber Security or Legal
• Thorough understanding of Information Management methodologies (data security, access control, classification, retention etc.) 
• In depth experience with IT Program Management (managing teams, budgets, setting expectations, timelines etc.) 
• Advanced knowledge of Microsoft 365 Platform elements: Outlook, Teams, OneDrive, SharePoint 
• Preferred: Experience with implementing GDPR Data Protection / Privacy in Europe (DPIAs, DSARs, Restricted Transfers
• Must have experience managing a team
• Must be autonomous, decisive, and practice a strategic thinking mindset 

 

Desirable:

• Experience with Microsoft Compliance tools including Microsoft Purview
• Experience with implementing GDPR Data Protection / Privacy in Europe (DPIAs, DSARs, Restricted Transfers) 

 

WHAT WE OFFER

 

This is unique role with a genuine opportunity to make an impact. You’ll get to work in a diverse environment with a team of professionals who are passionate about the work they do and know how to have some fun along the way.

 

Coty’s global omni-working policy provides the option to work up to 50% of your month remotely.  We believe that a more flexible philos