Sr. Manager, Data Protection and Insider Risk

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.
Meet The Team:

The Dexcom Information Security team is building a dedicated Data Protection and Insider Risk function to protect sensitive information, including trade secrets, from unauthorized access, movement, disclosure, or misuse. The function brings together Data Loss Prevention (DLP), insider risk detection and response, business data owner collaboration, investigations, and continuous control improvement.

This role will lead a global team maturing data protection controls and insider risk capabilities across endpoint, email, web, cloud, SaaS, and collaboration environments. The team will partner closely with peer Information Security functions, Privacy, Legal, HR, IT, Global Security, and business data owners to protect intellectual property, regulated data, and other high-value information.
Where You Come In:

- You will define and execute the Data Protection and Insider Risk strategy, operating model, and roadmap aligned to Dexcom ’s business risk, regulatory obligations, and Information Security priorities.

- You will build and lead a high-performing global team across employees, contractors, and service providers, with clear accountability for program delivery, investigations, and control effectiveness.

- You will own the enterprise DLP control lifecycle, including rule design, testing, tuning, deployment, approved exceptions, enforcement, and retirement across endpoint, email, web, cloud, SaaS, and collaboration channels.

- You will establish and mature the Insider Risk Program, including governance, risk scenarios, indicators, detection use cases, triage and investigation workflows, escalation paths, and response playbooks.

- You partner with business data owners to identify high-value information, define protection requirements, validate control intent, implement approved exceptions, and drive remediation and control adoption.

- You lead sensitive insider risk and data protection investigations, including suspected data misuse, exfiltration, control violations, and high-risk departures.

- You oversee the integration and optimization of data protection and insider risk technologies, telemetry, and analytics, including DLP, user activity monitoring, behavioral analytics, and supporting security platforms.

- You will drive automation, analytics, and AI-assisted capabilities to improve alert quality, prioritization, investigation efficiency, control tuning, and response with appropriate human oversight.

- You define and report KPIs and KRIs for control coverage and effectiveness, violation and exception trends, investigation outcomes, alert quality, program maturity, and risk reduction.

- You maintain program governance, operatin