[Hiring] Director I, Data Loss Prevention @InComm Payments

Role Description

As the DLP leader you will define and execute strategies to protect sensitive data across the organization from unauthorized exfiltration. You will take ownership of the security, legal, privacy, and compliance requirements and the development of cross-functional relationships with the relevant stakeholders. You will define, update, and enforce data governance directives and conduct gap analysis evaluation between current strategy, current state, and executive leadership goals and risk appetite.

We need someone with a proven track record of acquiring, deploying, maintaining, and improving tools and technology within data classification and DLP across possible exfiltration vectors (i.e. email, browser, storage, cloud). We need an engineering professional with skills and experience identifying, detecting, responding, recovering, and preventing incidents involving sensitive data, which includes cross-collaboration with the Security Operations team. Serving in this position also requires continuous, clear, targeted communication of status, progress, trends, roadmaps, and plans to relevant teams and the ability to build and maintain relationships across all categories of our enterprise.

Responsibilities

• Define plan/strategy based on requirements, and in agreement with leadership’s goals.
• Recruit, mentor, and maximize opportunities for direct reports growth to match personal goals with team/company objectives.
• Collaborate with stakeholders to identify and classify regulated and proprietary data.
• Research the tools and workflows used to store and manage sensitive data.
• Lead team in defining, measuring, and improving content detection rules for DLP, CASB and data classification tools to accurately label data and enforce data handling requirements.
• Lead team in deploying, tuning, measuring, and improving policies to monitor and protect sensitive data stored in repositories and in transit.
• Work with SOC analysts to develop workflows and respond to DLP alerts.
• Implement and track exceptions to prevent impediments to critical business workflows.
• Work with vendors to measure their performance and tools’ effectiveness to obtain maximum investment value.
• Exemplify a culture of continuous monitoring, continuous improvement, and automation (including the use of AI tools).

Qualifications

• Strong analytical skills.
• Ability to communicate security and data governance related concepts to a broad range of technical and non-technical staff both verbally and in writing.
• Demonstrated passion for continuous learning, and application of learned concepts.
• Ability to manage multiple tasks simultaneously and meet established deadlines.
• Ability to collaborate with all IT teams on security-related incidents, tasks and projects.
• Ability to work productively while remote and communicate effectively in a virtual team environment.
• Ability to stay current with new technology.
• Background in information security with experience as a DLP engineer or SOC analyst.
• Experience implementing or configuring enterprise security tools or responding to incident alerts.
• Experience writing regular expressions.
• Experience building DLP content detection rules.
• Able to describe strategies to improve content detection accuracy.
• Previous experience configuring or deploying DLP, CASB or data classification platforms.
• Basic understanding of the components of network, endpoint and cloud architectures.
• Strong analytical skills and previous experience querying data in a SIEM tool and working with Excel spreadsheets.
• 4+ years of information security experience.

Education & Certifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or another related field is preferred, but not required.
• A CISSP, Security+ or similar certifications are preferred, but not required. Career development plan to include certifications upon hire.

Benefits

• This position is eligible for the Employee Referral Bonus Program - Tier III.