2016-10-21

Xerox is the world's leading enterprise for business process and document management. Its services, technology, and expertise enable workplaces - from small businesses to large global enterprises - to simplify the way work gets done so they operate more effectively and focus more on what matters most: their real business. Xerox offers business process outsourcing and IT outsourcing services, including data processing, healthcare solutions, HR benefits management, finance support, transportation solutions, and customer relationship management services for commercial and government organizations worldwide. The company also provides extensive leading-edge document technology, services, software and genuine Xerox supplies for graphic communication and office printing environments of any size. Xerox serves clients in more than 160 countries. For more information, visit www.xerox.com, www.news.xerox.com, www.realbusiness.com or www.xerox.com/businessservices.

If you meet the requirements of this position and want to work for a world-class company with a great marketplace reputation, apply today.

Role Overview: 3-5 sentence summary of the role
The Data Loss Prevention Service Delivery Manager supports the corporate mission and objectives through highly engaged support of analysts of the DLP team. The Data Management & Protection Services Manager also assists in performing risk assessments, client communication, audit and advisory project planning and execution, engagement leadership, report delivery and follow-up consultation. Valuable professional attributes include strong relationship building skills, confident communication style, appropriate assertiveness, diplomacy, and personal initiative, and the ability to facilitate collaboration across all levels of the institution.

Key Responsibilities: What are key tasks and deliverables on a day-to-day basis?

* Provide audit support for the governance, and compliance of data security policy, standards, procedures, and guidelines to prevent the unauthorized use, release, modification, or destruction of data across multiple platforms and environments.
* Partnering with the security and other key application teams, develop an understanding of the data security protections and lead the development of testing plans for database and applications downstream of these systems.
* Develop data privacy and security testing plans and approaches that can be leveraged across various audits. Providing incident reports
* Support audit team with performing preliminary planning and establish defined data security testing approaches for audits.
* Coach and mentor audit team to set goals and responsibilities for specific engagements, foster teamwork, facilitate discussions on new ideas and opportunities for adding value to clients. Technical Expertise

Requirements: List any certifications, education, technical & behavioral competencies critical for the role.

* Up-to-date knowledge of technological trends and developments in the area of information security, governance, risk and compliance management, and data loss prevention.
* Knowledge of information security standards, codes of practice and guidelines such as the ISO/IEC 27000 series, the NIST Computer Security Standards, PCI, SSAE16, and the CIS Critical Security Controls.
* Understanding of legal and regulatory requirements such as HIPAA, FISMA, HITECH, FERPA, PCI, EU Data Privacy, Safe Harbor, federal and state identify theft acts, etc.
* Bachelor of Science in Accounting, Business, Information Technology or other relevant degree. Work experience in the related field will be considered. Appropriate professional certification or designation desired, CISSP, CISA, CISM or CIA preferred.
1. Preferences: What competencies would improve the performance of your current team?

* Function as the data management and protection subject matter expert for the audit team.
* Knowledge of information security standards, codes of practice and guidelines such as the ISO/IEC 27000 series, the NIST Computer Security Standards, PCI, SSAE16, and the CIS Critical Security Controls.
* Proven experience leading, driving and measuring Security or DLP teams towards a common goal.
* Approaches problems in a rational manner using sound strategies that ensure comprehensive understanding and effective resolution.
1. Additional Information:
Strong oral and written communication skills required. IT security skills working end point technology in a variety of IT infrastructures. Strong IT technical skills with experience securing and evaluating environments. This position requires a high level of technical knowledge as well as the skills necessary to work with various levels of the organization from IT support groups, to application owners, to the audit, compliance and security teams, to Duke leadership.

Xerox is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, sex, marital status, sexual orientation, physical or mental disability, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law. People with disabilities who need a reasonable accommodation to apply or compete for employment with Xerox may request such accommodation(s) by sending an e-mail to accommodations@xerox.com. Be sure to include your name, the job you are interested in, and the accommodation you are seeking.

#C1

#C3

**Job:** *IM Security*

**Organization:** *Xerox (XT)*

**Title:** *Data Loss Prevention Service Delivery Manager*

**Location:** *United States*

**Requisition ID:** *16028687*

**Virtual/work from home?** *Yes*

Show more