Senior Program Manager - Data Security & Information Governance

Why We Have This Role

We’re hiring a Senior Program Manager, Data Security & Information Governance to establish, scale, and orchestrate our enterprise Information Governance program. You’ll sit at the intersection of Legal, Data & Technology Operations, and Enterprise Data, bridging the gap between business strategy, legal compliance, data security, and engineering. Rather than acting as a traditional gatekeeper, you will build and manage our "Data Front Door" to directly address how teams discover data rights, request entitlements, and explore novel data use cases safely and efficiently.

How You’ll Find Success

• Governance Framework & Tooling Strategy: Deep fluency in establishing enterprise data governance frameworks, data catalogs, and business glossaries that scale across high-growth SaaS environments.
• Operational Enablement: Proven capability to design centralized intake and triage processes ("Data Front Door") that convert complex legal and security constraints into frictionless, self-service internal workflows.
• Cross-Functional Alignment: Ability to bridge legal compliance (HIPAA, GDPR, CCPA) with technical access controls (RBAC/ABAC, tokenization), working seamlessly alongside engineering, security, and product teams.
• Proactive Execution: Takes initiative to define the "how" in ambiguous regulatory or operational spaces, driving cross-functional alignment and resolving data policy conflicts across teams.
• Adaptive Curiosity: A drive to stay ahead of evolving data privacy laws, security architectures, and novel AI/ML data use cases to keep our governance models modern and flexible.

How You’ll Grow

• Master Enterprise Data Architecture: Expand your expertise across cloud data architectures (Snowflake, Databricks, AWS/GCP) and automated metadata pipelines to build modern, tech-enabled governance structures.
• Bridge Legal and Engineering Operations: Deepen your technical competency in access management (Okta, Immuta, Privacera) and data security capabilities, dissolving the divide between legal strategy and technical execution.
• Influence Platform Scale: Set the patterns and primitives for data use across a platform serving 18K+ global clients, ensuring data minimization, privacy-by-design, and compliant AI experimentation.

Things You’ll Do

• Build the "Data Front Door": Design and manage a centralized intake and triage process for custom data access requests, novel data questions, and complex derivative work inquiries.
• Curate the Data Marketplace: Establish a centralized Use Case Repository and Data Marketplace detailing pre-approved data uses, restrictions, and licensing parameters across distinct datasets.
• Automate Metadata & Classification: Partner with engineering and security teams to implement automated data classification, lineage tracking, and metadata harvesting.
• Translate Policy into Technical Controls: Collaborate with InfoSec to operationalize legal requirements into enforced technical access controls (RBAC/ABAC) and row/column-level security protocols.
• Drive Governance Adoption: Measure program success through adoption KPIs, request turnaround times, and governance maturity metrics, delivering self-service documentation and onboarding across the org.

What We’re Looking For On Your Resume

• 5+ years of experience in Data Governance, Data Security, Data Operations, or Information Architecture within a high-growth technology, SaaS, or data-intensive organization.
• Deep understanding of data privacy and security frameworks (HIPAA, GDPR, CCPA) and commercial data licensing nuances.
• Direct experience setting up, configuring, or administering enterprise data governance & catalog tools (e.g., Collibra, Alation, DataGalaxy, Atlan).
• Technical aptitude with cloud data ecosystems (Snowflake, Databricks, AWS/GCP), SQL, and data security mechanisms (hashing, tokenization, differential privacy).
• Demonstrated ability to create business-friendly, self-service workflows that accelerate R&D and AI/ML initiatives while ensuring strict compliance.
• Preferred certifications: CDMP, CIPP/US, CIPT, CDPSE, CISSP, or CISM.

What You Should Know About This Team

• Enablement Over Gatekeeping: We view governance as a business driver. Our goal is to make doing the right thing with data the easiest path for our product, engineering, and business teams.
• Cross-Functional Influence: You will sit at the crossroads of Legal, InfoSec, and Platform Engineering, serving as the connective tissue that translates legal policies into automated technical realities.
• Built for Scale: As Qualtrics expands its AI and data capabilities, you will build the foundational governance frameworks that ensure our growth remains safe, ethical, and fully compliant.