We are seeking an DSPM Lead who is responsible for designing, implementing, and managing the firm’s Data Security Posture Management capabilities across cloud, hybrid, and on‑premise environments. This role provides continuous visibility into where sensitive data resides, how it is accessed, whether it complies with global regulations, and how its security posture can be strengthened. The position serves as a bridge between Information Security, Data Governance, Risk &Compliance, and GTech to ensure data‑level protection across all regions and systems. The ideal candidate will have hands-on expertise in DSPM technology.
o Lead automated discovery of sensitive and regulated data across cloud platforms, SaaS, databases, and on prem systems, as described in DSPM core components.
o Ensure classification and tagging of PII, PHI, financial, client, and regulated data based on policy and regulatory requirements.
o Continuously assess data exposure risks, excessive permissions, and misconfigurations across environments.
o Evaluate compliance alignment with ISO 27001, NIST 800‑53, GDPR, HIPAA, SOX, and internal standards.
o Collaborate with Identity & Access Management to enforce least‑privilege access and remove excessive permissions.
o Recommend and implement security controls such as encryption, masking, tokenization, and DLP policies.
o Work with platform and application teams to remediate identified data security gaps.
o Provide continuous monitoring of data access patterns, anomalies, and compliance posture across hybrid environments.
o Deliver automated reporting to Security, Compliance, IT Leadership, and audit stakeholders.
o Track and report metrics related to risk reduction, compliance, and overall data security posture.
o Ensure alignment between DSPM strategy and the firm’s Data Lifecycle Management (DLM) and Data Governance programs.
o Support the development and enforcement of data‑centric security policies, standards, and operating procedures.
o Work with Data Owners and Stewards to validate classification requirements and ensure ongoing data protection across the lifecycle.
o Partner with GTech and Enterprise Architecture to ensure integrations align with global DSPM frameworks and strategy.
o Experience with DSPM vendor solutions (e.g., Veronis, Proofpoint, Cyberhaven) based on business needs and risk posture.
o Support escalations for data‑related security incidents in coordination with Legal, Compliance, GTech, and Business units.
o Participate in investigations involving data leakage, unauthorized access, or policy violations.
#LI-SG1
· English B2+ or Higher
· Attention to detail and accuracy
· Strong problem-solving and analytical abilities
· Collaborative mindset across IT, Legal, and Compliance
· Ability to translate compliance requirements into technical controls
· Commitment to continuous improvement and data stewardship
o Bachelor’s degree in Information Management, Library Science, Computer Science, Business Administration, or a related field.
o 5+ years of experience in Data Management, Data/Information Governance, or Compliance within a digital environment.
o Deep understanding of DSPM concepts: data discovery, classification, lineage, access governance, risk scoring, and remediation workflows.
o Experience with cloud security architecture across Azure, AWS, and SaaS platforms.
o Strong understanding of IAM controls, RBAC, Conditional Access, and data‑level access models.
o Knowledge of encryption, masking, tokenization, and secure data handling practices.
o Strong familiarity with GDPR, HIPAA, SOX, ISO 27001, NIST frameworks, and global data protection laws.
o Ability to interpret regulatory requirements into technical and operational controls.
o Ability to analyze complex data landscapes and identify risks and remediation priorities.
o Strong communication skills for preparing executive‑ready dashboards and reports.
o Ability to collaborate with cross‑functional teams globally (US, EU, APAC).
o 5+ years in Information Security, Data Governance, or Cloud Security programs.
o Experience working within multinational environments with complex data architectures.
o Certifications: CISSP, CISM, CCSP, Azure Security Engineer, or equivalent.
o Prior experience deploying DSPM technologies or building governance frameworks.
#LI-SG1
Now part of Grant Thornton US, Auxis is a leading consulting and tech-enabled nearshore outsourcing pioneer focused on helping organizations achieve a competitive edge through innovative processes, leading technologies, and world-class shared services. Fortune 1000 and upper-middle-market organizations have relied on Auxis’ customized solutions since 1997 to obtain real benefits and ROI from their transformation programs.
Recognized as a top outsourcing company globally by respected research firms, Auxis delivers comprehensive solutions to modernize and scale business operations across Finance, IT, Cybersecurity, HR, Customer Service, and specialized industry functions. Its nearshore delivery platform is supported by award-winning Digital Transformation capabilities spanning Intelligent Automation & RPA, AI, Agentic, Analytics, and Cloud.
Auxis is a subsidiary of Grant Thornton, the brand name for Grant Thornton LLP and Grant Thornton Advisors LLC, the U.S. member firms of Grant Thornton International Ltd. Grant Thornton is part of the Grant Thornton International Limited network, which provides access to its member firms in more than 150 global markets.
Grant Thornton International Limited (GTIL) and the member firms, including Grant Thornton LLP and Grant Thornton Advisors LLC, are not a worldwide partnership. Services are delivered by the member firms. GTIL and its member firms are not agents of, and do not obligate, one another and are not liable for one another’s acts or omissions. Please see www.grantthornton.com for further details.
