[Hiring] Data Protection Engineer @Republic Services

Role Description

The Data Protection Engineer is responsible for designing, implementing, and operating technical controls that safeguard sensitive data across the enterprise. The incumbent focuses on data discovery, classification, and governance, ensuring that sensitive information is accurately identified, labeled, protected, and handled in accordance with regulatory, legal, and business requirements.

The Data Protection Engineer partners closely with Information Technology, Security Operations, Privacy, Compliance, and data owners to enforce risk‑based controls, reduce data exposure, and enable secure use of data across on‑premises, cloud, and SaaS environments. Through automation, policy tuning, and continuous monitoring, the incumbent helps maintain visibility into data flows, prevents data loss, sensitive data overexposures, and supports a scalable, auditable data governance program.

Principal Responsibilities

• Lead the execution of enterprise‑wide data discovery & classification for both unstructured data (files, email, collaboration platforms, endpoints, SaaS) and structured data (databases, data warehouses, analytics and AI platforms).
• Lead data protection controls for Generative AI platforms (e.g., Microsoft Copilot, enterprise chat, custom LLM solutions) to prevent unintended data disclosure and misuse.
• Implement safeguards to ensure only appropriately classified and authorized data is available for AI prompts, responses, training, or retrieval‑augmented generation (RAG).
• Identify and mitigate data overexposure risks, including:
  • Excessive permissions and oversharing in collaboration platforms
  • Public or broadly accessible cloud storage
  • File servers and databases
  • Sensitive data leakage through prompts or outputs
  • Autonomous or agentic workflows acting beyond approved scope
  • Shadow AI and unsanctioned model usage
• Support data lifecycle governance, including retention, archival, legal hold, and secure disposal for both human and AI‑accessible data.
• Draft configuration manuals, operating procedures, reports, and system hardening guidelines.
• Provide guidance in the application and reporting of data protection technology performance metrics.
• Establish and maintain continuous data mapping and inventory to understand where sensitive data resides, how it is accessed, and how it flows across systems and integrations.
• Partner with cross-functional teams—including IT, Compliance, HR, and Legal—to ensure adherence to data protection standards.
• Perform other job-related duties as assigned or apparent.

Qualifications

• Experience designing and operating enterprise data discovery & classification programs across both unstructured and structured data.
• Practical experience identifying and remediating data overexposure.
• Hands‑on expertise with data classification and labeling technologies.
• Awareness of AI‑related risks and the ability to help enforce safeguards and acceptable use standards.
• Familiarity with Data Security Posture Management (DSPM) or data access governance tools.
• Experience reducing data risk through policy automation, bulk remediation workflows, and continuous monitoring.
• Knowledge of data lifecycle management practices.
• Relevant certifications such as CISSP, CISM, GSEC, Security+ or equivalent are highly desirable.
• Exposure to privacy engineering concepts.
• Strong understanding of industry frameworks such as CIS and NIST.
• Excellent written and verbal communication skills.

Requirements

• 5+ years of experience in Information Security, Data Protection or Security Engineering roles.
• Prior experience implementing or operating technology within at least three of the following: Data Access Governance, Data Classification, Data Discovery, Data Encryption, Data Loss Prevention.

Benefits

• Comprehensive medical benefits coverage, dental plans and vision coverage.
• Health care and dependent care spending accounts.
• Short- and long-term disability.
• Life insurance and accidental death & dismemberment insurance.
• Employee and Family Assistance Program (EAP).
• Employee discount programs.
• Retirement plan with a generous company match.
• Employee Stock Purchase Plan (ESPP).
• Paid Time Off (PTO).