ZS Associates—Information Protection Specialist (Data Governance)

Job description

Description: ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you’ll work side-by-side with a powerful collective of thinkers and experts shaping life-changing solutions for patients, caregivers and consumers, worldwide. ZSers drive impact by bringing a client-first mentality to each and every engagement. We partner collaboratively with our clients to develop custom solutions and technology products that create value and deliver company results across critical areas of their business. Bring your curiosity for learning, bold ideas, courage and passion to drive life-changing impact to ZS. What you'll do: Information Protection Specialist in Enterprise will establish, manage, and scale our enterprise-wide data security and governance framework. This role uniquely combines strategic leadership — shaping governance policies, frameworks, and organizational adoption — with technical oversight of governance and data security tools such as data discovery, DSPM (Data Security Posture Management), data loss prevention, data classification, and encryption frameworks. The role will ensure data is trusted, secure, compliant, and usable across the organization to drive decision-making, innovation, and regulatory alignment. Strategic Leadership (Data Security & Governance) focus - Define and lead the enterprise data protection and governance strategy in alignment with business objectives and regulatory mandates. - Establish a comprehensive framework, including policies, standards, and controls for data security, ownership, stewardship, and lifecycle management. - Collaborate with executives and stakeholders to embed a culture of data protection and governance - Ensure compliance with regulatory and privacy frameworks (GDPR, HIPAA, CCPA, PCI DSS, SOX). - Define and track key KPIs that measure data security and governance maturity, risk posture, and policy adoption. - Lead training & awareness efforts to elevate awareness across technical and non-technical communities. Technical Oversight (Tooling & Security Enablement Focus) - Data Governance : Implement and oversee data governance capabilities governing discovery, classification, and monitor sensitive data across cloud, SaaS, and hybrid environments. - Data Classification & Cataloging: Define standards for sensitive data labeling and enforce consistent classification through data catalogs , data lineage and automated workflows. - Data Protection: Design, implement and ensure robust data protection ensuring sensitive data is protected from exfiltration - Integration with Security Stack: Partner with InfoSec to integrate governance tools with DLP, SIEM, IAM, API security, and cloud-native security controls. - Tool Ownership: Evaluate, select, and manage security tooling (e.g., Zscaler DLP, Microsoft Purview, BigID). - Provide technical oversight in risk assessments, incident response, and data breach remediation activities related to sensitive or regulated data. Team Management & Leadership - Manage and mentor a team of data security professionals, including data security analysts & specialists. - Provide clear direction, performance feedback, and professional development opportunities to build a high-performing team. - Allocate resources and prioritize tasks to ensure timely delivery of governance initiatives and technical implementations. - Foster a collaborative and inclusive team culture focused on continuous learning and alignment with organizational goals. - Act as a role model, promoting best practices in leadership, communication, and cross-team collaboration. What you’ll bring: - Bachelor’s or Master’s in Data Management, Computer Science, Information Systems, or Cybersecurity. - 6+ years in data security or data lifecycle management, with at least 3 in a lead role managing teams. - Demonstrated experience implementing data classification, data loss prevention, DSPM in enterprise or regulated environments. - Hands-on familiarity with Data classification and data loss prevention tools (Purview, Zscaler DLP, BigID, Colibra, Informatica, Alation, Atlan etc) - Deep understanding of data security concepts: least-privilege access, zero trust, sensitive data workflows, breach impact mitigation, data loss prevention, data discovery and classification - Experience designing and implementing enterprise wide data loss prevention capability with exposure to DSPM and Insider Risk Mitigation - Certifications Preferred: Zscaler Data Security (EDU 220), Security+, CISM, CISSP or other relevant governance/security credentials. - Leadership Skills: Excellent stakeholder management, executive communication, and the ability to drive organizational change. - Fluency in English - Client-first mentality - Intense work ethic - Collaborative spirit and problem-solving approach How you’ll grow: - Cross-functional skills development & custom learning pathways - Milestone training programs aligned to career progression opportunities - Internal mobility paths that empower growth via s-curves, individual contribution and role expansions Perks & Benefits: At ZS, your growth matters. We offer a comprehensive total rewards package that supports your health and well‑being, financial future, time away, and professional development. With robust skills‑building programs, multiple career progression paths, internal mobility, and a deeply collaborative culture, you’ll have the opportunity to do meaningful work, expand your capabilities, and thrive as part of a global community. For details on total rewards in India, visit ZS India office locations | Where we work | ZS. Hybrid working model: We are committed to giving our employees a flexible and connected way of working. A flexible and connected ZS allows us to combine work from home and on-site presence at clients/ZS offices for the majority of our week. The magic of ZS culture and innovation thrives in both planned and spontaneous face-to-face connections. Travel: Travel is a requirement at ZS for client facing ZSers; business needs of your project and client are the priority. While some projects may be local, all client-facing ZSers should be prepared to travel as needed. Travel provides opportunities to strengthen client relationships, gain diverse experiences, and enhance professional growth by working in different environments and cultures. Considering applying? At ZS, we honor the visible and invisible elements of our identities, personal experiences, and belief systems—the ones that comprise us as individuals, shape who we are, and make us unique. We believe your personal interests, identities, and desire to learn are integral to your success here. We are committed to building a team that reflects a broad variety of backgrounds, perspectives, and experiences. Learn more about our inclusion and belonging efforts and the networks ZS supports to assist our ZSers in cultivating community spaces and obtaining the resources they need to thrive. If you’re eager to grow, contribute, and bring your unique self to our work, we encourage you to apply. ZS is an equal opportunity employer and is committed to providing equal employment and advancement opportunities without regard to any class protected by applicable law. To complete your application: Candidates must possess or be able to obtain work authorization for their intended country of employment. An on-line application, including a full set of transcripts (official or unofficial), is required to be considered. NO AGENCY CALLS, PLEASE. Find Out More At: www.zs.com Responsibilities: What you'll do: Information Protection Specialist in Enterprise will establish, manage, and scale our enterprise-wide data security and governance framework. This role uniquely combines strategic leadership — shaping governance policies, frameworks, and organizational adoption — with technical oversight of governance and data security tools such as data discovery, DSPM (Data Security Posture Management), data loss prevention, data classification, and encryption frameworks. The role will ensure data is trusted, secure, compliant, and usable across the organization to drive decision-making, innovation, and regulatory alignment. Strategic Leadership (Data Security & Governance) focus - Define and lead the enterprise data protection and governance strategy in alignment with business objectives and regulatory mandates. - Establish a comprehensive framework, including policies, standards, and controls for data security, ownership, stewardship, and lifecycle management. - Collaborate with executives and stakeholders to embed a culture of data protection and governance - Ensure compliance with regulatory and privacy frameworks (GDPR, HIPAA, CCPA, PCI DSS, SOX). - Define and track key KPIs that measure data security and governance maturity, risk posture, and policy adoption. - Lead training & awareness efforts to elevate awareness across technical and non-technical communities. Technical Oversight (Tooling & Security Enablement Focus) - Data Governance : Implement and oversee data governance capabilities governing discovery, classification, and monitor sensitive data across cloud, SaaS, and hybrid environments. - Data Classification & Cataloging: Define standards for sensitive data labeling and enforce consistent classification through data catalogs , data lineage and automated workflows. - Data Protection: Design, implement and ensure robust data protection ensuring sensitive data is protected from exfiltration - Integration with Security Stack: Partner with InfoSec to integrate governance tools with DLP, SIEM, IAM, API security, and cloud-native security controls. - Tool Ownership: Evaluate, select, and manage security tooling (e.g., Zscaler DLP, Microsoft Purview, BigID). - Provide technical oversight in risk assessments, incident response, and data breach remediation activities related to sensitive or regulated data. Team Management & Leadership - Manage and mentor a team of data security professionals, including data security analysts & specialists. - Provide clear direction, performance feedback, and professional development opportunities to build a high-performing team. - Allocate resources and prioritize tasks to ensure timely delivery of governance initiatives and technical implementations. - Foster a collaborative and inclusive team culture focused on continuous learning and alignment with organizational goals. - Act as a role model, promoting best practices in leadership, communication, and cross-team collaboration. What you’ll bring: - Bachelor’s or Master’s in Data Management, Computer Science, Information Systems, or Cybersecurity. - 6+ years in data security or data lifecycle management, with at least 3 in a lead role managing teams. - Demonstrated experience implementing data classification, data loss prevention, DSPM in enterprise or regulated environments. - Hands-on familiarity with Data classification and data loss prevention tools (Purview, Zscaler DLP, BigID, Colibra, Informatica, Alation, Atlan etc) - Deep understanding of data security concepts: least-privilege access, zero trust, sensitive data workflows, breach impact mitigation, data loss prevention, data discovery and classification - Experience designing and implementing enterprise wide data loss prevention capability with exposure to DSPM and Insider Risk Mitigation - Certifications Preferred: Zscaler Data Security (EDU 220), Security+, CISM, CISSP or other relevant governance/security credentials. - Leadership Skills: Excellent stakeholder management, executive communication, and the ability to drive organizational change. - Fluency in English - Client-first mentality - Intense work ethic - Collaborative spirit and problem-solving approach