Job Abstract

The Cybersecurity Data Security Manager (DSM) is responsible for the planning, building, delivery and support of the Cybersecurity Enterprise Data Security program. This individual will provide direction and guidance to the development, specifications, and communications of the Data Security related applications, as well as provide consultation to the business units and IT management and assist in developing plans and direction for the integration of information security requirements. The DSM is also responsible for establishing and implementing the enterprise data security governance framework to ensure that data assets and associated data processing activities are adequately protected in the digital ecosystem and compliant with regulatory and internal Sherwin-Williams requirements. This will involve identifying, evaluating, and reporting on regulatory and security risk to data processing activities, working to assist with the implementation of data security policies and the evaluation and recommendations for data protection technologies. The DSM will execute the Data Security strategy for the enterprise in conjunction with key business partners, Digital Technology, and the Cybersecurity Organization.

The DSM collaborates with the data privacy organization, key business partners and the Enterprise Data Organization (EDO) to create policies and controls for the appropriate protection of business data. The DSM will work with Cybersecurity Business Enablement (BEM) and business leaders to determine acceptable levels of risk for business data, and with business units and cybersecurity partners to implement practices that meet agreed policies and standards for data security. The DSM should understand and articulate the impact of data security on the Sherwin business and be able to communicate this to executive level stakeholders.

The DSM leads research, strategy creation and implementation of new data security products or services to support the usage of identified secure data in a secure and compliant manner. The DSM conducts data security risk assessments, focused on critical business processes or applications. The DSM identifies, and suggests prioritization of, data security risk treatment for the organization and determines how to maintain and improve adherence to regulatory requirements and corporate policies.

This individual will lead a team of analysts in the data security space. This individual will also work closely with the manager of the Data Security (Technology) team. This position will report to the Sr Director, Architecture and Engineering.