The Director will secure a SaaS-first ecosystem, Microsoft 365 E5, Azure, Salesforce, Egnyte, Box, Workday, and enterprise SSO/identity platforms and will build and direct a distributed security organization that includes onshore, offshore and specialist SOC/MSSP partners. Oversee GDPR compliance in partnership with Legal and Privacy teams, including data protection principles, records of processing activities, data subject rights, cross-border data transfer controls, and breach notification readiness.