[Hiring] Senior Manager, Data Protection and Insider Risk @Dexcom

Role Description

The Dexcom Information Security team is building a dedicated Data Protection and Insider Risk function to protect sensitive information, including trade secrets, from unauthorized access, movement, disclosure, or misuse. This role will lead a global team maturing data protection controls and insider risk capabilities across various environments.

• Define and execute the Data Protection and Insider Risk strategy, operating model, and roadmap aligned to Dexcom’s business risk, regulatory obligations, and Information Security priorities.
• Build and lead a high-performing global team across employees, contractors, and service providers, with clear accountability for program delivery, investigations, and control effectiveness.
• Own the enterprise DLP control lifecycle, including rule design, testing, tuning, deployment, approved exceptions, enforcement, and retirement across endpoint, email, web, cloud, SaaS, and collaboration channels.
• Establish and mature the Insider Risk Program, including governance, risk scenarios, indicators, detection use cases, triage and investigation workflows, escalation paths, and response playbooks.
• Partner with business data owners to identify high-value information, define protection requirements, validate control intent, implement approved exceptions, and drive remediation and control adoption.
• Lead sensitive insider risk and data protection investigations, including suspected data misuse, exfiltration, control violations, and high-risk departures.
• Oversee the integration and optimization of data protection and insider risk technologies, telemetry, and analytics, including DLP, user activity monitoring, behavioral analytics, and supporting security platforms.
• Drive automation, analytics, and AI-assisted capabilities to improve alert quality, prioritization, investigation efficiency, control tuning, and response with appropriate human oversight.
• Define and report KPIs and KRIs for control coverage and effectiveness, violation and exception trends, investigation outcomes, alert quality, program maturity, and risk reduction.
• Maintain program governance, operating procedures, and defensible investigative practices that support proportionate monitoring, evidence handling, privacy requirements, and consistent decision-making.

Qualifications

• BS/MS in Computer Science, Cybersecurity, Information Technology, Engineering, Risk Management, or a related field, or equivalent work experience.
• 10+ years of experience in cybersecurity, data security, risk, investigations, or related disciplines; 5+ years focused on data protection, DLP, or insider risk.
• Proven success building, transforming, or scaling enterprise Data Protection, DLP, or Insider Risk programs in complex global environments.
• Strong understanding of enterprise DLP controls across endpoint, email, web, cloud, SaaS, and collaboration environments.
• Experience with enterprise DLP and insider risk platforms, including Netskope, Microsoft Purview, or similar technologies.
• Demonstrated experience leading sensitive investigations and partnering with HR, Legal, Privacy, GRC, Global Security, business leaders, and technical teams.
• Strong knowledge of privacy, legal, regulatory, and ethical considerations for employee monitoring, sensitive data handling, and insider risk programs in global enterprises.
• Experience using automation, analytics, or AI to improve data protection and insider risk operations.
• Preferred certifications such as CISSP, CISM, CIPP, GIAC, CERT Insider Threat credentials, or other relevant data protection, privacy, or insider risk certifications.

Requirements

• Typically requires a Bachelor’s degree in a technical discipline with 13+ years of industry experience.
• 5-8 years of previous people management experience.

Benefits

• A front-row seat to groundbreaking technology that impacts lives around the world.
• A full and comprehensive benefits program, including medical, dental, and vision coverage, and wellness programs.
• Competitive compensation with performance incentives and opportunities for advancement within a growing, innovative company.
• Work-life balance support through flexible work arrangements and unlimited paid time off.
• Access to in-house training, development programs, career mentorship, and opportunities to attend security conferences to support your professional growth.
• The chance to work in an inclusive, diverse environment that values teamwork, collaboration, and continuous improvement.
• The opportunity to connect with the #dexcomwarriors community and contribute to a purpose-driven mission that makes a difference.