Sr. Manager, Data Protection

Description This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting) Summary: The Senior Manager, Data Protection is responsible for leading the strategy, governance, and operational execution of enterprise Data Protection and Privacy incident response operations. This role will report to the Director of Insider Risk and Data Protection and provide leadership across data security, privacy compliance, and data governance capabilities to ensure the organization's sensitive information remains protected. A successful candidate will partner closely with Cybersecurity, Legal, Privacy, Risk, Human Resources, Technology, Compliance, and business stakeholders to develop and mature enterprise-wide capabilities that protect customer, employee, and corporate data across on-premises, cloud, SaaS, collaboration, and endpoint environments. This leader will drive risk reduction through technical controls, operational governance, and continuous innovation leveraging analytics, automation, and AI.

Data Protection Strategy & Leadership Execute the enterprise Data Protection strategy, roadmap, and governance model. Lead and engage in programs focused on protecting sensitive information across the full data lifecycle, including collection, storage, processing, transmission, sharing, retention, and disposal. Establish policies, standards, and operating procedures supporting secure data handling and regulatory compliance. Drive enterprise adoption of data protection technologies, controls, and best practices. Provide strategic direction and leadership for Data Protection, Privacy Operations. Enterprise Data Security Lead and support enterprise-wide initiatives related to: Data classification and labeling Data discovery and inventory management Data Loss Prevention (DLP) Insider Risk Management Encryption and tokenization Ensure protection of sensitive data across: Endpoints Cloud platforms SaaS applications Collaboration platforms Email systems Enterprise repositories Develop risk-based controls to prevent unauthorized access, misuse, or exfiltration of sensitive data. Define and oversee enterprise data protection metrics, reporting, and governance processes. Privacy Operations Lead the operational execution of enterprise privacy incident response playbook. Collaborate with Legal, Compliance, and Privacy teams to ensure alignment with privacy regulations, including: GDPR CCPA HIPAA Other applicable regulatory requirements Provide subject matter expertise on: Personal Information (PII) Data minimization Data sharing Maintain enterprise Data protection strategy, governance, and operational processes. Partner with Insider Risk and Security Operations teams to develop monitoring, detection, investigation, and response capabilities. Risk Management & Assessments Lead data protection assessment activities. Conduct or oversee: Data Protection Impact Assessments Regulatory compliance assessments Data flow analysis Security control evaluations Identify data protection risks and develop scalable remediation strategies. Maintain risk registers, governance reporting, and remediation tracking processes. Executive Engagement & Reporting Provide executive-level reporting on: Data protection program maturity Key performance indicators Transformation & Innovation Support and drive large-scale cybersecurity and data protection transformation initiatives. Evaluate emerging technologies, automation opportunities, and AI-enabled capabilities that enhance data protection and privacy operations.

Deep experience implementing and managing enterprise Data Protection solutions and controls. Experience with: DLP platforms Exceptional communication and stakeholder management skills.

Bachelor's Degree or 4+ additional years of equivalent experience. 7+ years' experience leading Data Protection and/or Data