Data Security Expert
Project description
Lead data security product management and protect sensitive and proprietary data across the organization
Responsibilities
- Own and manage enterprise data security technologies including: ➢ DSPM (Data Security Posture Management) ➢ DLP (Data Loss Prevention) ➢ Data discovery and classification platforms
- Define product strategy, roadmap, and lifecycle management for data security tooling
- Ensure optimal deployment, adoption, and continuous improvement of solutions
- Define and enforce enterprise-wide data classification frameworks
- Establish and maintain standards for data handling, storage, and protection
- Drive adoption of data labeling, encryption, masking, and tokenization practices
- Ensure consistency of policies across structured and unstructured data
- Lead prevention strategies for data leakage across endpoints, SaaS, cloud, and collaboration platforms
- Monitor, investigate, and respond to data security incidents and breaches
- Establish playbooks for incident response, root cause analysis, and remediation
- Collaborate with SOC and IR teams to enhance detection and response capabilities
- Enable secure use of data across: ➢ Cloud platforms (AWS, Azure, GCP) ➢ SaaS applications (M365, Salesforce, etc.) ➢ Endpoints and collaboration tools ➢ AI/ML and GenAI platforms
- Balance security with business agility by implementing adaptive and risk-based controls Act as a trusted advisor to engineering and business teams on secure data usage
SKILLS
Must have
- 7+ years of experience in information/data security, with strong focus on data protection
- Hands-on experience with DLP, DSPM, and data discovery tools (e.g., Microsoft Purview, Symantec, Netskope, BigID, Varonis, etc.)
- Strong understanding of data classification, governance, and lifecycle management
- Experience investigating data leakage and breach incidents
- Familiarity with cloud and SaaS security models
- Strong knowledge of privacy regulations and compliance frameworks
- Excellent stakeholder management and communication skills
- Ability to translate business requirements into security controls
Nice to have
N/A