Manager,Data Protection Services
Blackbaud looking for a seasoned security leader to own and evolve our Data Protection and Cryptographic Services program. This is a rare opportunity to build something that matters at a company that is making serious investments in security and AI. This is a high-impact, highly visible role will set the strategic direction for securing the Company’s sensitive data, while leading and growing a team of talented security engineers.
This role requires both the technical expertise to lead engineering teams building and operating complex security controls to support the Company's responsible adoption of AI, and the communication skills to translate that work into clear, compelling narratives for executive leadership and the board.
What You Will Be Doing
- Define, own, and execute a multi-year roadmap for data protection and cryptographic services, maturing the program from operational to industry-leading.
- Establish and enforce data protection policies, standards, and frameworks aligned with industry best practices (NIST, ISO 27001, SOC 2, GDPR, CCPA, and emerging AI governance standards).
- Serve as the company's authoritative source on data protection strategy, advising executive leadership on risk posture and investment priorities.
- Lead the architecture, deployment, and continuous improvement of the full DLP ecosystem, including Web Proxies & SSL Inspection, Cloud Access Security Broker (CASB), Data Classification & Tagging, Data Security Posture Management (DSPM), and AI Security Posture Management (AI-SPM)
- Own vendor relationships, contract negotiations, and technology roadmap alignment for all data protection tooling.
- Oversee the company's cryptographic standards and practices, including key management, PKI, encryption-at-rest and in-transit standards, and secrets management.
- Drive adoption of modern cryptographic controls across engineering teams, ensuring alignment with evolving standards and quantum-readiness planning.
- Set expectations, manage performance, and build a high-trust team environment where engineers do their best work.
What we'd like you to have:
- 10+ years of experience in information security, with at least 5 years in a people management role leading technical security teams.
- Demonstrated ability to build and mature security programs, not just operate them.
- Track record of influencing cross-functional partners (Engineering, Legal, Compliance, IT, Product) without direct authority.
- Strong working knowledge of cryptographic principles and applied cryptography — key management lifecycles, HSMs, PKI, TLS/mTLS
- Familiarity with cloud-native data security architectures across AWS, GCP, and/or Azure.
- Working knowledge of AI/ML security concepts — data poisoning, model exfiltration, prompt injection, and AI governance frameworks.