Senior Manager Data Security

Job Requisition ID #

Job Description Senior Manager, Data Security

Position Overview As the Senior Manager for Data Security, you will be responsible for guiding, defining, and implementing Autodesk's overall data protection and security strategies, programs and organization. Acting as a trusted leader, you will partner across multiple functions to champion and implement top-tier data security solutions. In this role, you will collaborate with other leaders to shape data security strategies throughout the organization, serving a diverse audience that includes both developers and end-users. Your expertise in data security, security engineering, and cloud security will play a crucial role in ensuring that Autodesk's systems and services meet the highest data security standards and align with our industry-leading practices and regulatory requirements.

This is a strategic, leadership position. You will be reporting directly to the Sr. Director, Information Security Engineering in the Trust Organization.

Responsibilities

• Oversee the design, implementation, and operationalization of solutions to ensure the data security of infrastructure, applications, and systems, including the selection and deployment of cybersecurity technologies
• Oversee data security throughout the entire lifecycle of infrastructure and services, from design to runtime
• Establish and enforce data security standards, best practices, and assurance processes
• Build a comprehensive data catalog and implement data governance strategies
• Collaborate with TPMs and influence stakeholders to define and prioritize backlog related to data protection efforts
• Ensure the data security strategy is aligned with business objectives and regularly reviewed for effectiveness
• Lead efforts to mature capabilities for data classification and inventory, strengthen security baselines for data protection and handling, and ensure solutions meet strict data security and compliance requirements
• Research new services and emerging technologies that will further enhance data security capabilities
• Establish security metrics and define KPIs for data protection programs

Minimum Qualifications

• Bachelor's degree in computer science, information security, or a related field (Master's degree preferred)
• 15+ years of experience in information security with a focus on security engineering, data protection, enterprise security, cloud security, and solutions architecture
• Proven leadership experience in managing data protection solutions, such as data security posture management (DSPM), data loss prevention (DLP) systems, encryption technologies, and data masking/anonymization techniques
• Familiarity with industry-standard data protection frameworks and best practices
• Identity and Access Management (IAM): In-depth knowledge of IAM principles, including user provisioning, authentication, authorization, and privilege management. Hands-On Experience with IAM technologies, such as LDAP, Active Directory, or identity federation protocols (e.g., SAML, OAuth)
• Cloud Security: Proficiency in cloud security and experience with cloud service providers (e.g., AWS, Azure, Google Cloud, O365) and SaaS Data Security, knowledge of secure cloud architecture design, cloud data protection mechanisms, and cloud identity and access management (IAM)
• Programming and Scripting Experience ( Python, PowerShell, Shell Scripting, Ruby, Go)

Preferred Qualifications

• Proven ability to lead security and solutions engineering teams to create and develop systems and services to operationalize data protection technologies
• Demonstrated ability to collaborate with multiple partners and align teams in making security decisions and implementing solutions
• Lifelong learner with a commitment to continuous improvement
• Experience working with multiple internal teams
• Master Data Management (MDM): Experience ensuring data consistency, accuracy, and accountability across diverse business units and data sources
• Legal Aspects of Information Security: Familiarity with data protection laws, regulatory requirements, and compliance standards
• Risk Assessment and Compliance Management: Proven ability to identify potential threats and vulnerabilities and ensure compliance with data protection laws and practices
• Effective Communication and Stakeholder Engagement: Ability to convey complex security concepts to non-technical stakeholders
• Data Analysis and Management: Solid foundation in data analysis and management, including DBMS and data visualization skills.

Learn More

About Autodesk

Welcome to Autodesk! Amazing things are created every