Director, Data Security & Governance

About the job

Director - Data Security & Governance
Arrivia
Remote-US · Full-time

Paste this url into your browser to view the full job description and apply directly provn.co:

Job Context

Arrivia powers the travel behind many of the world's membership and loyalty brands. Its private travel marketplace gives members access to deeply discounted cruises, resorts, and hotels, and its platform runs the booking, servicing, and rewards underneath those programs. The engineering teams build and scale that platform across a distributed, cloud-native architecture.

As Director of Data Security & Governance, you protect Arrivia's data wherever it lives, through classification, data loss prevention, and encryption, the controls that most often separate a clean audit from a top-severity finding. You lead the Data Security team and own classification, DLP across every egress channel, Data Security Posture Management across cloud, SaaS, and endpoints, and the cryptography standards, key management, and tokenization underneath it all. You also own the data-governance side of AI, from training-data and RAG-source controls to prompt and response DLP that keeps sensitive data out of the models. This role reports to the CIO and is Remote-US (open to most states, with a few exceptions listed on the role page).

You fit if you have five or more years in data security and governance, including leading a team, with hands-on time in DLP tooling like Microsoft Purview, Symantec, or Forcepoint and in DSPM across cloud, SaaS, and endpoints. You know encryption at rest and in transit along with real key management and key-lifecycle work, and you bring a strong grip on ISO 27001, HIPAA, PII, PCI, and GDPR. A CISSP is required for this role. The full requirements live on the role page at provn.co.

How hiring works here

Applying with Provn is designed to get more interviews for the best candidates coming in without a referral. The challenge is the first step of the application, and it carries as much weight as anything else you submit. Instead of sending a cold resume into an ATS and waiting, you complete a challenge built by Arrivia: you build the work, then record a short video walking through how you approached it. You'll work through it the way you would on the job, and you'll show the thinking behind the calls you made.

Both the artifact and the video are required to complete your application, and only complete applications are considered for this role. You'll take on a data-security scenario shaped like the work you'd own here and show how you'd classify the risk, where you'd place the control, and why.

Why that works in your favor:

• You show how you actually protect data across its whole lifecycle and where you place the control, instead of hoping a resume of standards and certs gets it across.
• Your governance judgment becomes visible, which no list of frameworks on a resume can prove.
• One challenge puts you in front of the security leadership team, scored on the work, with no referral required to get there.

The hiring manager reviews every completed submission, and the strongest candidates go straight to an interview round. No referral needed. Performance over pedigree. Proof over polish.

What's in it for you

Compensation for this role is $145,000-$180,000. Salary is competitive and will be discussed during interviews. You also get access to the private travel marketplace with deeply discounted cruises, resorts, and hotels, comprehensive medical, dental, and vision coverage, and a 401k with company match. Beyond the package, you own the controls that keep member data protected worldwide, with a direct line to the CIO and the mandate to make strong data governance the default.

Apply by completing the challenge at provn.co, where the full role details live. Applications are open through August 28.

Paste this url into your browser to view the full job description and apply directly provn.co: