Manager, Data Protection Services

Blackbaud is a company focused on social impact through technology and responsible AI. They are seeking a Manager of Data Protection Services to lead the evolution of their data protection and cryptographic programs, managing a team while safeguarding sensitive data and shaping security strategies.

Responsibilities:

• Define, own, and execute a multi-year roadmap for data protection and cryptographic services, maturing the program from operational to industry-leading
• Establish and enforce data protection policies, standards, and frameworks aligned with industry best practices (NIST, ISO 27001, SOC 2, GDPR, CCPA, and emerging AI governance standards)
• Serve as the company's authoritative source on data protection strategy, advising executive leadership on risk posture and investment priorities
• Lead the architecture, deployment, and continuous improvement of the full DLP ecosystem, including Web Proxies & SSL Inspection, Cloud Access Security Broker (CASB), Data Classification & Tagging, Data Security Posture Management (DSPM), and AI Security Posture Management (AI-SPM)
• Own vendor relationships, contract negotiations, and technology roadmap alignment for all data protection tooling
• Oversee the company's cryptographic standards and practices, including key management, PKI, encryption-at-rest and in-transit standards, and secrets management
• Drive adoption of modern cryptographic controls across engineering teams, ensuring alignment with evolving standards and quantum-readiness planning
• Set expectations, manage performance, and build a high-trust team environment where engineers do their best work

Requirements:

• 10+ years of experience in information security, with at least 5 years in a people management role leading technical security teams
• Demonstrated ability to build and mature security programs, not just operate them
• Track record of influencing cross-functional partners (Engineering, Legal, Compliance, IT, Product) without direct authority
• Strong working knowledge of cryptographic principles and applied cryptography — key management lifecycles, HSMs, PKI, TLS/mTLS
• Familiarity with cloud-native data security architectures across AWS, GCP, and/or Azure
• Working knowledge of AI/ML security concepts — data poisoning, model exfiltration, prompt injection, and AI governance frameworks
• Familiarity with agile development processes
• Hands-on experience deploying AI-SPM tooling or building LLM security controls
• Industry Certifications like: CISSP, CCSP, CRISC, CISM, CISA, AWS certification(s), Azure certification(s)
• Experience contributing to or responding to regulatory audits and certifications