Senior Program Manager - Data Security & Information Governance

At Qualtrics, we create software the world’s best brands use to deliver exceptional frontline experiences, build high-performing teams, and design products people love. But we are more than a platform—we are the creators and stewards of the Experience Management category serving over 18K clients globally. Building a category takes grit, determination, and a disdain for convention—but most of all it requires close-knit, high-functioning teams with an unwavering dedication to serving our customers. When you join one of our teams, you’ll be part of a nimble group that’s empowered to set aggressive goals and move fast to achieve them. Strategic risks are encouraged and complex problems are solved together, by passing the mic and iterating until the best solution comes to light. You won’t have to look to find growth opportunities—ready or not, they’ll find you. From retail to government to healthcare, we’re on a mission to bring humanity, connection, and empathy back to business. Join over 5,000 people across the globe who think that’s work worth doing. Senior Program Manager, Data Security & Information Governance Why We Have This Role We’re hiring a Senior Program Manager, Data Security & Information Governance to establish, scale, and orchestrate our enterprise Information Governance program. You’ll sit at the intersection of Legal, Data & Technology Operations, and Enterprise Data, bridging the gap between business strategy, legal compliance, data security, and engineering. Rather than acting as a traditional gatekeeper, you will build and manage our "Data Front Door" to directly address how teams discover data rights, request entitlements, and explore novel data use cases safely and efficiently. How You’ll Find Success Governance Framework & Tooling Strategy: Deep fluency in establishing enterprise data governance frameworks, data catalogs, and business glossaries that scale across high-growth SaaS environments. Operational Enablement: Proven capability to design centralized intake and triage processes ("Data Front Door") that convert complex legal and security constraints into frictionless, self-service internal workflows. Cross-Functional Alignment: Ability to bridge legal compliance (HIPAA, GDPR, CCPA) with technical access controls (RBAC/ABAC, tokenization), working seamlessly alongside engineering, security, and product teams. Proactive Execution: Takes initiative to define the "how" in ambiguous regulatory or operational spaces, driving cross-functional alignment and resolving data policy conflicts across teams. Adaptive Curiosity: A drive to stay ahead of evolving data privacy laws, security architectures, and novel AI/ML data use cases to keep our governance models modern and flexible. How You’ll Grow Master Enterprise Data Architecture: Expand your expertise across cloud data architectures (Snowflake, Databricks, AWS/GCP) and automated metadata pipelines to build modern, tech-enabled governance structures. Bridge Legal and Engineering Operations: Deepen your technical competency in access management (Okta, Immuta, Privacera) and data security capabilities, dissolving the divide between legal strategy and technical execution. Influence Platform Scale: Set the patterns and primitives for data use across a platform serving 18K+ global clients, ensuring data minimization, privacy-by-design, and compliant AI experimentation. Things You’ll Do Build the "Data Front Door": Design and manage a centralized intake and triage process for custom data access requests, novel data questions, and complex derivative work inquiries. Curate the Data Marketplace: Establish a centralized Use Case Repository and Data Marketplace detailing pre-approved data uses, restrictions, and licensing parameters across distinct datasets. Automate Metadata & Classification: Partner with engineering and security teams to implement automated data classification, lineage tracking, and metadata harvesting. Translate Policy into Technical Controls: Collaborate with InfoSec to operationalize legal requirements into enforced technical access controls (RBAC/ABAC) and row/column-level security protocols. Drive Governance Adoption: Measure program success through adoption KPIs, request turnaround times, and governance maturity metrics, delivering self-service documentation and onboarding across the org. What We’re Looking For On Your Resume 5+ years of experience in Data Governance, Data Security, Data Operations, or Information Architecture within a hi