[Hiring] Senior Manager, Data Protection Services @Blackbaud

Role Description

Blackbaud is looking for a seasoned security leader to own and evolve our Data Protection and Cryptographic Services program. This is a rare opportunity to build something that matters at a company that is making serious investments in security and AI. This is a high-impact, highly visible role that will set the strategic direction for securing the Company’s sensitive data, while leading and growing a team of talented security engineers.

This role requires both the technical expertise to lead engineering teams building and operating complex security controls to support the Company's adoption of AI, and the communication skills to translate that work into clear, compelling narratives for executive leadership and the board.

• Define, own, and execute a multi-year roadmap for data protection and cryptographic services, maturing the program from operational to industry-leading.
• Establish and enforce data protection policies, standards, and frameworks aligned with industry best practices (NIST, ISO 27001, SOC 2, GDPR, CCPA, and emerging AI governance standards).
• Serve as the company's authoritative source on data protection strategy, advising executive leadership on risk posture and investment priorities.
• Lead the architecture, deployment, and continuous improvement of the full DLP ecosystem, including:
  • Web Proxies & SSL Inspection — policy enforcement, traffic visibility, and certificate management at scale
  • CASB (Cloud Access Security Broker) — shadow IT discovery, sanctioned SaaS controls, and real-time session enforcement
  • Data Classification & Tagging — automated and human-assisted classification pipelines, labeling standards, and metadata governance
  • DSPM (Data Security Posture Management) — continuous discovery, classification, and risk assessment of data at rest across cloud environments
  • AI-SPM (AI Security Posture Management) — securing AI pipelines, model inputs/outputs, and training data; managing risk as the company deepens its AI footprint
• Own vendor relationships, contract negotiations, and technology roadmap alignment for all data protection tooling.
• Oversee the company's cryptographic standards and practices, including key management, PKI, encryption-at-rest and in-transit standards, and secrets management.
• Drive adoption of modern cryptographic controls across engineering teams, ensuring alignment with evolving standards and quantum-readiness planning.
• Set expectations, manage performance, and build a high-trust team environment where engineers do their best work.

Qualifications

• 10+ years of experience in information security, with at least 5 years in a people management role leading technical security teams.
• Demonstrated ability to build and mature security programs, not just operate them.
• Track record of influencing cross-functional partners (Engineering, Legal, Compliance, IT, Product) without direct authority.
• Strong working knowledge of cryptographic principles and applied cryptography — key management lifecycles, HSMs, PKI, TLS/mTLS.
• Familiarity with cloud-native data security architectures across AWS, GCP, and/or Azure.
• Working knowledge of AI/ML security concepts — data poisoning, model exfiltration, prompt injection, and AI governance frameworks.
• Familiarity with agile development processes.
• Hands-on experience deploying AI-SPM tooling or building LLM security controls.
• Industry Certifications like: CISSP, CCSP, CRISC, CISM, CISA, AWS certification(s), Azure certification(s).
• Experience contributing to or responding to regulatory audits and certifications.

Benefits

• Medical, dental, and vision insurance
• Remote-flexible workforce
• Wellness Programs
• 401(k) program with employer match
• Flexible paid time off
• Generous Parental Leave
• Donations for Doers
• Pet insurance, legal and identity protection
• Tuition reimbursement program