Role Description
The Information Security Engineer of Data Protection will assist the technical leader for the Data protection team at Cardinal Health. This Engineer will support the manager and senior information security engineer to architect, design, and support technology solutions to enhance our data security posture. This includes Cloud Access Security Broker technologies and Database monitoring solutions.
-
Assist in designing and supporting the implementation of data protection tools.
-
Manage rules, configuration setup and deployments of detection capabilities through change control.
-
Contribute to the remediation and closure of events/incidents of concern in data protection platforms.
-
Partner with analysts towards the reduction of false positives by tuning controls.
-
Partner with the manager and technical lead to provide expertise to corporate, market segments and IT teams and implement appropriate security and monitoring controls.
-
Collaborate with internal IT and business teams to build and deploy security and monitoring controls for databases and CASB integrations.
-
Work with the manager and technical lead to define and then implement team processes to enable delivery of the Data protection road map initiatives.
-
Determine current and anticipate future data needs and support the development of security controls in collaboration with the data protection team.
-
Educate data owners and key business technology and application leaders on data identification, secure handling, storage, and transfer of sensitive data.
Qualifications
-
Demonstrated experience with database monitoring technologies and data security.
-
Deep understanding and prior experience with CASB solutions and ability to work on a team and independently towards deployment of solutions.
-
Demonstrated Information Security understanding and specifically industry best practices for the development of data protection team.
-
One or more Information Security Certifications preferred: CISSP, CSSLP, CISM, CCSP, GSLC, GSEC, CISA, SSCP.
-
Degree in related field or equivalent work experience.
-
4-5 years of experience in related field preferred.
Requirements
-
Contributes to the development of policies and procedures related to data protection.
-
Works on complex projects of large scope domestically and internationally.
-
Develops technical solutions to a wide range of difficult problems. Solutions are innovative and consistent with organizational goals.
-
Continues to support the development of sensitive data processes to improve Cardinal Health enterprise security posture.
-
Works to create automation and orchestration solutions to assist with data protection initiatives.
-
Provides general guidance on new projects and tasks.
-
Recommends new practices, processes, metrics, or models.
-
Acts as a mentor to less experienced colleagues.
Benefits
-
Medical, dental and vision coverage.
-
Paid time off plan.
-
Health savings account (HSA).
-
401k savings plan.
-
Access to wages before pay day with myFlexPay.
-
Flexible spending accounts (FSAs).
-
Short- and long-term disability coverage.
-
Work-Life resources.
-
Paid parental leave.
-
Healthy lifestyle programs.