DATA LOSS PREVENTION PROGRAM DIRECTOR

INFORMATION SYSTEMS - NEW YORK

COTY is looking for smart leaders who are fast and passionate.We're Coty, one of the world's largest beautycompanies with a portfolio of iconic brands across fragrance, color cosmetics, and skin and body care. Coty serves consumers around the world, selling prestige and mass market products in more than 130 countries and territories. Coty and our brands empower people to express themselves freely, creating their own visions of beauty; and we are committed to making a positive impact on the planet.

The Data Loss Prevention (DLP) program within Coty involves a set of IT / Regulatory systems and processes to prevent Coty sensitive data being lost (or 'leaking') from Coty. It is part of the cybersecurity suite of systems - and unlike security systems like firewalls and access controls which prevent bad actors getting in, DLP recognizes that unfortunately internal personnel also form part of the risk landscape, by risky (and usually inadvertent) practices that puts Coty data at risk (eg. sending work emails to their Gmail to be easier to read on the train home). The DLP program, once implemented, will monitor Microsoft suite (MS365 - Outlook email/Teams/SharePoint/OneDrive) and implement a set of policies/rules to detect and prevent actions that put Coty sensitive data at risk.

The DLP Program Director will have overall responsibility for the DLP Program globally at Coty, reporting to the Head of Information Security and Compliance. The role requires working across all departments at Coty, including Coty IT (for technical running of the DLP systems), HR and Legal (for investigations and escalations of DLP alerts/breaches) and well as all main Coty functions through the DLP Department Lead group.

In this role you will be responsible to:

• Manage and evolve the DLP Program over time according to business priorities and strategy
• Hold and manage the budget for the DLP Program.
• Lead the DLP team including successful execution of the program and development of team
• Communicate and champion the DLP program to all personnel at Coty
• Coordinate and chair DLP Governance meetings with key business departments and senior leadership at Coty
• Negotiate and implement DLP requirements coming from Coty departments through the DLP Department Lead group
• Operate the DLP Program day-to-day and train/supervise other DLP administrators in daily DLP program operation, including:
  • Create and refine DLP classifiers (sensitive information types)
  • Define and update DLP Policies (rules associated with classifiers)
  • Manage DLP alerts from DLP Policy matches, including escalations and investigations
  • Define KPIs for the DLP Program
  • Design and run reports to measure KPIS and system performance
  • Develop and implement the DLP training program including working with third parties

We'd love to see candidates who have:

Essential:

• Four-year degree in Information Security, Law or related field
• 10+ years of work experience within a field such as Data Privacy, Cyber Security or Legal
• Thorough understanding of Information Management methodologies (data security, access control, classification, retention etc.)
• In depth experience with IT Program Management (managing teams, budgets, setting expectations, timelines etc.)
• Advanced knowledge of Microsoft 365 Platform elements: Outlook, Teams, OneDrive, SharePoint
• Preferred: Experience with implementing GDPR Data Protection / Privacy in Europe (DPIAs, DSARs, Restricted Transfers
• Must have experience managing a team
• Must be autonomous, decisive, and practice a strategic thinking mindset

Desirable:

• Experience with Microsoft Compliance tools including Microsoft Purview
• Experience with implementing GDPR Data Protection / Privacy in Europe (DPIAs, DSARs, Restricted Transfers)

This is unique role with a genuine opportunity to make an impact. You'll get to work in a diverse environment with a team of professionals who are passionate about the work they do and know how to have some fun along the way.

Coty's global omni-working policy provides the option to work up to 50% of your month remotely. We believe that a more flexible philosophy of remote working will give everyone the freedom to choose what works for their individual circumstances and empower them to always perform at their best.

Our people make us who we are. They are the brightest minds bringing the boldest ideas to life every day.If you're the kind of person who refuses to settle, if you want to think bigger, learn faster and go further than you ever thought possible - we'd love to hear from you.

Coty is deeply committed to Changing the Conversation around Diversity, Equity & Inclusion in an effort to create a more open, inclusive, and diverse workplace where all employees can be their authentic self.

We offer equal employment opportunity to qualified individuals without regard to race, religion, color, national origin, age, gender,disability, sexual orientation, gender identity, gender expression, marital status, veteran status, or any other characteristic protected by law. Coty complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact.We strongly believe that cultivating a diverse workplace gives a company strength. The combination of unique skills, abilities, experiences and backgrounds creates an environment that produces extraordinary results. EOE Minorities/Females/Protected Veterans/Disabled.

English -Please clickto review the Notification of Equal Opportunity Rights poster

Espanol -Por favor,unen el enlace para revisar el poster de la Ley de los Derechos de Igualdad de Empeo

Base Salary Range:$160,000-180,000