Senior Manager, Data Protection & Forensics

QXO is hiring a Senior Manager, Data Protection & Forensics to lead enterprise data protection and digital forensics. The role owns the DLP platform, data discovery and classification, insider risk investigations, forensic examinations, eDiscovery, and automation, while leading a small team and partnering across the business.

Responsibilities:

• Own the enterprise data loss prevention (DLP) platform end to end: architecture, administration, policy design, tuning, and alert triage across endpoint, email, web, cloud, and SaaS
• Build and run data discovery and classification so we know where customer, employee, financial, and payment data lives across a multi-cloud environment
• Run data security posture management. Find overexposed, stale, and redundant data, and remove access people don't need
• Bring each acquired company's data under the same controls on a defined timeline as part of M&A integration
• Extend DLP and investigations to generative AI, covering what data goes into AI tools and how prompts and outputs are preserved as evidence
• Run the insider risk program from signal to closed case, working with HR, Legal, Privacy, and Employee Relations
• Lead digital forensic examinations across Windows, macOS, Linux, mobile devices, cloud workloads, and collaboration platforms, from collection and preservation through analysis and reporting
• Own evidence handling and chain of custody to a standard that holds up in litigation, regulatory inquiry, and law enforcement referral
• Bring forensic depth to every major incident: scope, root cause, and deliver the evidence that feeds materiality decisions and after-action reports
• Run eDiscovery collections and legal holds for Legal and outside counsel and manage forensic and eDiscovery firms when a matter needs outside support
• Brief executives, Legal, and HR on findings in plain language
• Lead and grow a small team of data security analysts. Hire well, coach hard, and set the bar
• Automate first. Build playbooks that triage DLP alerts, enrich cases, and close low-risk volume without a human in the loop
• Write and maintain the data protection and forensics standards, procedures, and runbooks, mapped to NIST CSF 2.0
• Report metrics that show risk improvements: policy coverage, true-positive rate, time to triage, case cycle time, and sensitive-data exposure trend
• Partner with IT, Data & Analytics, Engineering, and Legal to put controls in place without slowing the business down

Requirements:

• 7+ years in information security, with hands-on time in both data protection (DLP, classification, DSPM, or insider risk) and digital forensics or incident response
• 2+ years leading people
• Hands-on administration of an enterprise DLP platform at scale. You've written the policies and tuned out the noise yourself
• Working command of forensic acquisition and analysis for disk, memory, mobile, and cloud, plus chain-of-custody practice
• Experience running eDiscovery collections and legal holds and working investigations with HR and Legal under privilege
• Scripting in Python or PowerShell, and experience with SOAR or workflow automation
• Working knowledge of NIST CSF 2.0 and the data rules that apply to a public company: PCI DSS, CMMC, state privacy laws, and SEC cybersecurity disclosure
• Sound judgment and discretion
• Clear writing and briefing for executives and counsel
• Bachelor's degree in computer science, information systems, or a related field, or equivalent experience
• CISSP
• GCFA, GCFE, GCFR, or EnCE
• CIPP/US or CIPT
• Experience in a multi-company or M&A integration environment