Security Analyst III

Description:

Job Title: Senior Data Protection Engineer Location: any remote US, must be willing to work CST or EST hours Duration: 12 months w/ possible extensions thereafter

Job Description: Role Summary/Purpose: The Data Loss Prevention Engineer within the Information Security organization will be responsible for driving an enterprise-wide data loss prevention program to safeguard and secure the organization’s data. This includes creating and modifying DLP policies and rules to identify, detect, and protect data. In this role, this individual will be part of the Data Protection Engineering team for Information Security, working with the cyber security teams and key business stakeholders to help define data loss prevention strategy and roadmap and influencing teams to deliver best in class data loss prevention service. You will be responsible for the development and implementation of data loss prevention policies and rules to address and reduce the risk of data exfiltration.

Essential Responsibilities: • Accountable for designing and building effective DLP policies and rules to protect and safeguard the organization's data. • Support the Data Protection product owner defining the intent, roadmap, and strategy to ensure execution and delivery of the data loss prevention roadmap. • Support development and management of Data Loss Prevention metrics. • Stays current with emerging threat landscape and develops/enhances capabilities and strategies to safeguard the business from data exfiltration. • Acting as a subject matter expert to assist with solving data loss prevention problems, especially as it relates to the Data Protection security service. • Partners closely with key stakeholders to ensure alignment of sensitive data to protect for data loss prevention capabilities. • Serves as a data loss prevention expert, trusted advisor, and central point of contact for IT and business stakeholders. • Assists with the development of standards, best practices, and guidelines for the organization's policies, standards, and procedures. • Ensures that as part of designing and building efficient cyber security capabilities these capabilities are achieving industry best practices, compliance and regulatory requirements such as PCI-DSS, HIPAA, etc. • Perform other duties and/or special projects as assigned

Qualifications/Requirements: • Bachelor’s degree with a minimum of 5 years of experience in Information Security, Engineering, Application Development, or related field OR in lieu of a degree, a High School Diploma/GED and minimum 7 years equivalent work experience. • Minimum 5 years of experience in data loss prevention role

Desired Characteristics: • Demonstrate an understanding of the impact of emerging business and end-user technologies have on information security requirements and architecture • Demonstrate an understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business • Proven strong decision-making capabilities, with a proven track record of weighing the relative costs and benefits of potential actions and identifying the most appropriate one • Demonstrated technical expertise in existing security and IT systems and an ability to keep pace with changing security and IT technologies • Strong interpersonal skills, with an emphasis on demonstrating previous experience effectively influencing others at all levels within the organization and cross functionally • A team-focused mentality with proven experience to work effectively with diverse stakeholders • Demonstrated experience communicating complex and technical issues to diverse audiences, verbally and in writing, in an easily understood, and actionable manner