Director, Data Protection

Guild Mortgage Company, closing loans and opening doors since 1960. As a mortgage banking firm we are dedicated to serving the homeowner/buyer. Our goal is to provide affordable home financing for our customers, utilizing the best terms available while providing a level of professionalism and service unsurpassed in the lending industry.

Position Summary

The Director of Data Protection is a strategic leadership role responsible for establishing and overseeing the organization's data protection program. This includes protecting sensitive data across on-premises and cloud environments, ensuring regulatory compliance, and minimizing risk related to data loss, exposure, and misuse. This role partners closely with Security Engineering, Security Operations, Legal, Privacy, IT, and business leaders to implement scalable data protection controls aligned with frameworks such as NIST CSF, CIS Critical Security Controls, and SOC 2.

Compensation

This role is an exempt position with a targeted salary range of $144,001 to $210,601 annually.

Compensation at Guild is influenced by a wide array of factors including but not limited to local and federal minimum wage requirements, education, level of experience, and applicant's geographical location.

Essential Functions

• Act as the primary liaison between Information Security and business units for data protection initiatives.
• Translate technical controls and data risk findings into business-relevant impact, including financial, regulatory, and operational implications.
• Partner with business leaders to identify critical data assets, define classification requirements, and align protection strategies to business objectives.
• Provide clear guidance to business stakeholders on secure data handling, sharing, and retention practices.
• Lead awareness and training initiatives focused on reducing data handling risks (e.g., improper sharing, shadow IT, SaaS sprawl).
• Collaborate with product, sales, and operations teams to ensure data protection requirements are embedded into business processes and customer solutions.
• Present data protection posture, risks, and remediation strategies to executive leadership, risk committees, and non-technical audiences.
• Establish feedback loops with business units to continuously improve usability and adoption of data protection controls.
• Define and execute the enterprise data protection strategy, roadmap, and operating model.
• Establish policies, standards, and procedures for data classification, handling, retention, and destruction.
• Align data protection initiatives with NIST, CIS, SOC 2, and regulatory requirements (e.g., GLBA, CCPA, GDPR where applicable).
• Lead the development of a data protection governance framework, including metrics and reporting for executives and risk committees.
• Oversee deployment and management of: Data Loss Prevention (DLP) solutions (endpoint, network, cloud/SaaS), Data Security Posture Management (DSPM) and data discovery/classification tools, Encryption strategies (data at rest, in transit, and key management), Tokenization, masking, and anonymization technologies.
• Ensure visibility and protection of sensitive data across: M365 (SharePoint, OneDrive, Exchange), Cloud platforms (Azure, AWS), SaaS platforms (Salesforce, Snowflake, etc.).
• Define and enforce secure data lifecycle management practices.
• Identify and assess data-related risks, including shadow data stores and unauthorized data movement.
• Partner with Legal/Compliance to ensure adherence to privacy laws and contractual obligations.
• Support audits and certifications (SOC 2, internal audits, regulatory exams).
• Develop risk acceptance, mitigation, and exception processes for data-related issues.
• Establish monitoring capabilities to detect data exfiltration, misuse, and anomalous access patterns.
• Partner with Security Operations to integrate data protection alerts into SIEM/SOAR workflows.
• Lead response efforts for data-related incidents, including breach investigations and reporting.
• Provide guidance to business units on secure data handling practices.
• Develop and maintain data protection KPIs and scorecards for executive leadership.
• Report on program maturity, risk posture, and control effectiveness.
• Build and lead a high-performing data protection team.
• Drive a culture of continuous improvement, accountability, and security awareness.
• Mentor team members and promote cross-training and career development.

Qualifications

• Bachelors Degree directly related to the position or equivalent, required.
• Minimum 10 years experience.
• Minimum five years supervisory or leadership experience.
• Excellent interpersonal communication skills required.
• Excellent verbal and written communication skills required.
• Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required.
• Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.
• Commitment to company values.
• Customer Service - Proactive attention to each person.
• Integrity - Do and say whats right.
• Respect - Treat others with dignity.
• Collaboration - Listen and work together.
• Learning - Seek knowledge and strive for improvement.
• Excellence - Deliver the unexpected.

Supervision

Job Scope: Manages a single program, work unit, small department, or multiple program segments.

Complexity: Problems encountered may involve the entire organization and are often complex, broad in scope and implications, and unprecedented with no clear solution; often works cross-functionally with other leadership and C-Suite to solve problems and implement changes.

Impact: Decisions and actions have a major impact on the outcomes of the department, projects, and programs; Has a direct and significant impact on the business and/or operations of major segments of the organization.

Interaction/Supervision: Supervises one or more staff members within the same or similar areas; may contribute to hiring, termination, and pay decisions.

#Direct Reports: 2-3.

Requirements

• Work is primarily sedentary; mobility in an office setting.
• Ability to operate standard office equipment and keyboards.
• Expressing or exchanging ideas by means of the spoken word to impart oral information to clients or the public and to convey detailed spoken instructions to other workers accurately, loudly, or quickly.
• Office environment - moderate noise, no substantial exposure to adverse environmental conditions.
• Travel 5% or less.
• This role requires effective adaptation to workplace stressors, including customer service complaints, security responsibilities, and competing priorities.
• Work is primarily performed during the business week, Monday - Friday.

Guild offers a pleasant work environment, competitive compensation and excellent benefits package; including medical, dental, vision, life insurance, AD&D, LTD and 401(k) with employer match.

Guild Mortgage Company is an Equal Opportunity Employer.

REQ#: DIREC018271