Senior Manager, Data Protection & Forensics

As a Senior Manager, Data Protection & Forensics at QXO , you'll own how we protect sensitive data and how we investigate when it ends up where it shouldn't. You'll run our data loss prevention platform and our digital forensics function, with an automation first mindset. QXO is a leading distributor and installer of building products serving an $800 billion market.

The company’s mission is to modernize the building products industry through advanced technology and a best-in-class customer experience. QXO is North America’s largest distributor and installer of insulation, the second-largest distributor of roofing products, the second-largest publicly traded distributor of lumber and building materials, and the largest distributor of waterproofing products.

The company is targeting $50 billion in annual revenue within the decade through accretive acquisitions and organic growth. For more information, visit QXO.com.

What you'll do

Own the enterprise data loss prevention (DLP) platform end to end: architecture, administration, policy design, tuning, and alert triage across endpoint, email, web, cloud, and SaaS. Build and run data discovery and classification so we know where customer, employee, financial, and payment data lives across a multi-cloud environment.

Run data security posture management. Find overexposed, stale, and redundant data, and remove access people don't need. Bring each acquired company's data under the same controls on a defined timeline as part of M&A integration. Extend DLP and investigations to generative AI, covering what data goes into AI tools and how prompts and outputs are preserved as evidence.

Run the insider risk program from signal to closed case, working with HR, Legal, Privacy, and Employee Relations. Lead digital forensic examinations across Windows, macOS, Linux, mobile devices, cloud workloads, and collaboration platforms, from collection and preservation through analysis and reporting. Own evidence handling and chain of custody to a standard that holds up in litigation, regulatory inquiry, and law enforcement referral.

Bring forensic depth to every major incident: scope, root cause, and deliver the evidence that feeds materiality decisions and after-action reports. Run eDiscovery collections and legal holds for Legal and outside counsel and manage forensic and eDiscovery firms when a matter needs outside support. Brief executives, Legal, and HR on findings in plain language.

Lead and grow a small team of data security analysts. Hire well, coach hard, and set the bar. Automate first. Build playbooks that triage DLP alerts, enrich cases, and close low-risk volume without a human in the loop. Write and maintain the data protection and forensics standards, procedures, and runbooks, mapped to NIST CSF 2.

1. Report metrics that show risk improvements: policy coverage, true-positive rate, time to triage, case cycle time, and sensitive-data exposure trend. Partner with IT, Data & Analytics, Engineering, and Legal to put controls in place without slowing the business down.

What you'll bring

7+ years in information security, with hands-on time in both data protection (DLP, classification, DSPM, or insider risk) and digital forensics or incident response. 2+ years leading people. Hands-on administration of an enterprise DLP platform at scale. You've written the policies and tuned out the noise yourself. Working command of forensic acquisition and analysis for disk, memory, mobile, and cloud, plus chain-of-custody practice.

Experience running eDiscovery collections and legal holds and working investigations with HR and Legal under privilege. Scripting in Python or PowerShell, and experience with SOAR or workflow automation. Working knowledge of NIST CSF 2.0 and the data rules that apply to a public company: PCI DSS, CMMC, state privacy laws, and SEC cybersecurity disclosure.

Sound judgment and discretion. You'll handle sensitive material and personnel matters, and you'll make calls on incomplete facts. Clear writing and briefing for executives and counsel. Bachelor's degree in computer science, information systems, or a related field, or equivalent experience. Preferred: CISSP; GCFA, GCFE, GCFR, or EnCE.

CIPP/US or CIPT is a plus. Experience in a multi-company or M&A integration environment is a plus. What you'll earn Base pay range: $140,400 - $210,600 Annual performance bonus 401(k) with employer match Medical, dental, and vision insurance PTO, company holidays, and parental leave Paid Time Off/Paid Sick Leave: Applicants can expect to accrue 15 days of paid time off during their first year (4.

62 hours for every 80 hours worked) and increased accruals after five years of service. Paid training and certifications Legal assistance and identity protection Pet insurance Employee assistance program (EAP) To comply with Pay Transparency laws, employers must disclose an annual salary range. Actual offers depend on factors such as location, experience, skills, and market data.

This position may also offer variable compensation. Please contact careers@QXO.com if you have any questions related to this job posting. QXO is an Equal Opportunity Employer. We value diversity and do not discriminate on the basis of race, color, religion, gender or sexual orientation , national origin, age, disability, or any other protected status.

Salary Range: USD $140,400.00

• USD $210,600.00 /Yr. Own the enterprise data loss prevention (DLP) platform end to end: architecture, administration, policy design, tuning, and alert triage across endpoint, email, web, cloud, and SaaS. Build and run data discovery and classification so we know where customer, employee, financial, and payment data lives across a multi-cloud environment. Run data security posture management. Find overexposed, stale, and redundant data, and remove access people don't need. Bring each acquired company's data under the same controls on a defined timeline as part of M&A integration. Extend DLP and investigations to generative AI, covering what data goes into AI tools and how prompts and outputs are preserved as evidence. Run the insider risk program from signal to closed case, working with HR, Legal, Privacy, and Employee Relations. Lead digital forensic examinations across Windows, macOS, Linux, mobile devices, cloud workloads, and collaboration platforms, from collection and preservation through analysis and reporting. Own evidence handling and chain of custody to a standard that holds up in litigation, regulatory inquiry, and law enforcement referral. Bring forensic depth to every major incident: scope, root cause, and deliver the evidence that feeds materiality decisions and after-action reports. Run eDiscovery collections and legal holds for Legal and outside counsel and manage forensic and eDiscovery firms when a matter needs outside support. Brief executives, Legal, and HR on findings in plain language. Lead and grow a small team of data security analysts. Hire well, coach hard, and set the bar. Automate first. Build playbooks that triage DLP alerts, enrich cases, and close low-risk volume without a human in the loop. Write and maintain the data protection and forensics standards, procedures, and runbooks, mapped to NIST CSF 2.0. Report metrics that show risk improvements: policy coverage, true-positive rate, time to triage, case cycle time, and sensitive-data exposure trend. Partner with IT, Data & Analytics, Engineering, and Legal to put controls in place without slowing the business down. 7+ years in information security, with hands-on time in both data protection (DLP, classification, DSPM, or insider risk) and digital forensics or incident response. 2+ years leading people. Hands-on administration of an enterprise DLP platform at scale. You've written the policies and tuned out the noise yourself. Working command of forensic acquisition and analysis for disk, memory, mobile, and cloud, plus chain-of-custody practice. Experience running eDiscovery collections and legal holds and working investigations with HR and Legal under privilege. Scripting in Python or PowerShell, and experience with SOAR or workflow automation. Working knowledge of NIST CSF 2.0 and the data rules that apply to a public company: PCI DSS, CMMC, state privacy laws, and SEC cybersecurity disclosure. Sound judgment and discretion. You'll handle sensitive material and personnel matters, and you'll make calls on incomplete facts. Clear writing and briefing for executives and counsel. Bachelor's degree in computer science, information systems, or a related field, or equivalent experience. Preferred: CISSP; GCFA, GCFE, GCFR, or EnCE. CIPP/US or CIPT is a plus. Experience in a multi-company or M&A integration environment is a plus.