Director Cybersecurity - Data Protection and Insider Threat

Job Id: R0000419830

The pay range is $163,000.00 - $294,000.00

Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.

About Us

Target is an iconic brand, a Fortune 50 company, and one of America’s leading retailers.

Target as a tech company? Absolutely. We’re the behind-the-scenes powerhouse that fuels Target’s passion and commitment to cutting-edge innovation. We anchor every facet of one of the world’s best-loved retailers with a strong technology framework that relies on the latest tools and technologies—and the brightest people—to deliver incredible value to guests online and in stores. Target Technology Services is on a mission to offer the systems, tools and support that guests and team members need and deserve. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely and reliably from the inside out. Our high-performing teams balance independence with collaboration, and we pride ourselves on being versatile, agile and creative.

Use your skills, experience, and talents as a member of a world-class cyber security team!

About the Role

As the Director of Cybersecurity – Data Protection & Insider Threat, you will lead and shape the strategy for Target’s Data Protection and Insider Threat programs. This role is accountable for overseeing the teams responsible for building and enforcing the controls, processes, and policies that safeguard Target’s sensitive data, as well as detecting, investigating, and responding to data loss and insider threats.

You will:

• Enhance and evolve data protection capabilities to prevent data loss, misuse, or unauthorized exposure.
• Lead the Insider Threat function, including detection, response, and prevention of malicious insider activity.
• Help build and enforce enterprise-wide policies around data governance and security controls.
• Partner with stakeholders across business and technology functions to strengthen insider threat posture and align data protection practices with organizational priorities.
• Provide vision and strategic direction for Insider Threat and Data Protection analysts, ensuring successful execution of security programs that address enterprise risks.
• Foster a culture of continuous improvement, innovation, and collaboration.
• Serve as a trusted advisor to business and technology leaders on insider threat risks and data protection practices.

Responsibilities

• Develop and execute long-term strategy for Insider Threat and Data Protection programs.
• Establish robust monitoring, detection, and response capabilities using SIEM, SOAR, UEBA, RBA, and DLP technologies.
• Lead the creation and enforcement of policies for data management, handling, and protection.
• Identify and address enterprise-wide risks related to insider threats and data exposure.
• Build strong stakeholder relationships across the enterprise and influence product and technology roadmaps to enhance security posture.
• Drive cross-functional initiatives and collaborate with other cybersecurity, engineering, and business teams.
• Provide coaching, performance management, and career development for a team of analysts.
• Effectively communicate technical issues, risks, and strategies to both technical and non-technical audiences, including senior leadership.
• Stay current on emerging threats, technologies, and best practices to continuously enhance program capabilities.

About You

• 4+ years of cybersecurity experience, with demonstrated expertise in insider threat, data protection, or related security domains.
• Proven leadership experience managing cybersecurity teams or functions.
• Hands-on knowledge of SIEM, SOAR, UEBA, RBA, and DLP tools.
• Strong problem-solving skills with ability to resolve complex technical issues with minimal assistance.
• Demonstrated ability to build strong cross-functional partnerships and influence enterprise strategy.
• Adept at communicating technical issues in training, mentorship, and executive settings.
• Committed to process improvement and continuous innovation.
• Strong written and verbal communication skills, with ability to present complex security concepts clearly to varied audiences.
• Deep understanding of insider threat landscape and modern data protection practices.
• Self-directed learner who stays current with evolving cybersecurity trends and threats.

This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. A Hybrid/Flex for Your Day work arrangement means the team member’s core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota.

Benefits Eligibility

Americans with Disabilities Act (ADA)

In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to candidate.accommodations@HRHelp.Target.com. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.