Data Protection Manager

Requisition ID:  90759 

Florida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians. With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy. Want to be part of something powerful? Join our outstanding team and help shape the future of energy.

Position Specific Description

The Data Protection Manager is responsible for establishing and leading the company’s strategy for safeguarding sensitive information, ensuring compliance with global data protection regulations, and managing the design, development, and implementation of data privacy and security solutions. This leader will oversee enterprise-wide practices that protect personal and confidential data, while balancing business needs with regulatory obligations. The role requires strong leadership, strategic vision, and the ability to manage cross-functional teams and vendor relationships to ensure the reliability, performance, security, and compliance of all data-driven processes.

Key Responsibilities

• Strategic Leadership: Provide vision, influence, and direction for the organization’s data protection and privacy strategy in alignment with business objectives.
• Policy & Compliance: Develop, implement, and enforce data protection policies, standards, and procedures to ensure compliance with GDPR, CCPA, HIPAA, and other applicable regulations.
• Risk Management: Assess and mitigate risks related to data privacy, security, and protection, balancing regulatory requirements with operational needs..
• Cross-Functional Collaboration: Partner with IT, Legal, Compliance, and Business Units to embed data protection practices into business operations.
• Vendor & Third-Party Management: Oversee third-party service providers and outsourcing relationships to ensure adherence to data protection requirements.
• Team Leadership: Attract, develop, and retain a high-performing and diverse team of data protection and privacy professionals.
• Continuous Improvement: Establish and maintain data protection roadmaps, training programs, and awareness campaigns to strengthen the company’s culture of privacy.

Preferred Qualifications

• High School Diploma / GED
• Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalent experience)
• 4+ years of experience in information security, data protection, privacy compliance, or related disciplines
• 1+ years of supervisory or management experience leading cross-functional teams
• Strong understanding of global privacy laws, regulations, and frameworks (e.g., GDPR, CCPA, ISO 27001, NIST)
• Proven track record of implementing enterprise-wide data protection and compliance initiatives
• Bachelor’s degree in Information Security, Computer Science, or related field
• Professional certifications such as CIPM, CIPP/E, CISM, or CISSP
• Experience leading data protection programs in a highly regulated industry