Data is arrivia's most valuable asset, and this role keeps it protected wherever it lives. As Director of Data Security & Governance, you'll own the controls that most often separate a clean audit from a high-severity finding: classification, data loss prevention, and encryption.
You'll set the standard for how arrivia classifies, protects, and governs data across cloud, SaaS, and endpoints. You'll lead a dedicated Data Security team and operate with real autonomy, partnering across Privacy, Infrastructure, and App & AI Security while owning the technical protection controls end to end.
You'll also define how we protect data in the age of AI, from training-data controls to prompt and response DLP. arrivia is investing in AI-driven innovation, and you'll have modern tools and the mandate to use them to work faster and smarter.
What You'll Own
- Data classification and handling: Own information classification, labeling, and handling standards so sensitive data is identified and protected everywhere it lives.
- Data loss prevention: Own DLP across every egress channel, including PII and SOC adherence reviews and controls.
- Data security posture management: Own DSPM across cloud, SaaS, and endpoints to find and close exposure before it becomes a finding.
- Encryption and key management: Own cryptography standards, key management, HSM, and the full key lifecycle, including tokenization.
- Access governance and insider risk: Own data-access governance, insider-risk programs, and enterprise data retention and deletion.
- Data residency and records: Own data residency and sovereignty controls plus records management and eDiscovery.
- Data governance for AI: Own training-data and RAG-source controls and prompt and response DLP to keep sensitive data from leaking to LLMs.
- Team leadership: Lead and grow the Data Security team, setting the methods and standards the broader organization relies on.
- Measurable outcomes: Drive toward full classification coverage, DLP on every egress channel, and automated discovery and enforcement across the estate.
What You'll Bring
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or a minimum of 7 years in security.
- 5+ years in data security and governance, including team leadership.
- Hands-on experience with data classification and DLP tooling (for example Microsoft Purview, Symantec/Broadcom, or Forcepoint) across email, endpoint, and cloud.
- Experience deploying Data Security Posture Management (DSPM) across cloud, SaaS, and endpoints.
- Strong knowledge of encryption for data at rest and in transit, plus hands-on key management, HSM, and key-lifecycle experience, including tokenization.
- Experience with data-access governance, insider-risk, and enterprise data retention.
- Knowledge of data residency and sovereignty and records management and eDiscovery.
- Working knowledge of data governance for AI (training-data and RAG controls and prompt and response DLP).
- Strong understanding of ISO 27001/27701, HIPAA, PII, PCI, and GDPR principles.
- Ability to translate complex technology issues into language a wide range of audiences can understand.
- CISSP required. CIPT, CDPSE, or CISM preferred.
Benefits & Perks
- Unlimited PTO
- Exclusive employee travel rates
- Travel discounts through arrivia programs
- Medical, dental, and vision insurance
- 401(k) with company participation
Who We Are
Why arrivia
At arrivia, we power travel loyalty and rewards programs for some of the world's leading brands. Our teams help millions of travelers book memorable experiences while delivering innovative technology and travel solutions to our partners. With a global workforce and a culture built on curiosity, ownership, authenticity, and collaboration, we're creating the future of travel.
Our Core Values
- Stay Curious: Explore new challenges and make space to learn, grow, and improve.
- Keep it Real: Earn trust through open, honest, and clear communication.
- Own it: Seek ways to make an impact and take action.
- Win Together: Create a culture of connection and inclusion where everyone can be their best.
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
Skills Required
- Bachelor's degree in Computer Science, Cybersecurity, or related field OR minimum of 7 years in security.
- 5+ years in data security and governance, including team leadership.
- Hands-on experience with data classification and DLP tooling (e.g., Microsoft Purview, Symantec/Broadcom, or Forcepoint) across email, endpoint, and cloud.
- Experience deploying Data Security Posture Management (DSPM) across cloud, SaaS, and endpoints.
- Strong knowledge of encryption for data at rest and in transit, plus hands-on key management, HSM, and full key-lifecycle experience, including tokenization.
- Experience with data-access governance, insider-risk programs, and enterprise data retention and deletion.
- Knowledge of data residency and sovereignty controls, records management, and eDiscovery.
- Working knowledge of data governance for AI (training-data and RAG controls; prompt and response DLP).
- Strong understanding of ISO 27001/27701, HIPAA, PII, PCI, and GDPR principles.
- Ability to translate complex technology issues into language a wide range of audiences can understand.
- CISSP certification.
- CIPT, CDPSE, or CISM certifications.
arrivia Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about arrivia and has not been reviewed or approved by arrivia.
-
Strong & Reliable Incentives — Commission-based earnings in sales are described as having strong upside when performance is high, with bonuses and full payouts cited as meaningful contributors to total pay.
-
Wellbeing & Lifestyle Benefits — Travel discounts and awards are positioned as a standout perk, supplemented by lifestyle add-ons like wellness programs, lifestyle spending, and office perks that add non-cash value.
-
Parental & Family Support — Family-building and parental benefits are described as more modern than baseline offerings, including paid parental leave and adoption/surrogacy and fertility support.
arrivia Insights
What We Do
Welcome to arrivia. We specialize in making brands better through the power of travel. With more than 55 years of combined experience, we’re a merger of three powerhouse brands (in case you’ve heard of us in the travel industry) combining ICE, SOR Technology and WMPH Vacations. With offices on both coasts of the US and around the world, we embrace diversity and a passion for travel across our global staff. We’re focused on building a customer-first culture, fueled by the best travel experiences for all our members at every point in their journey. Grow with us, as we continue our path to deliver innovative solutions and take charge of change. The adventure is only beginning. We’re on a mission to help people around the world travel better and experience more. Our team members bring world-class skills to the table to create extraordinary memories for our partners and members.
