Data Security Expert

Project description

Lead data security product management and protect sensitive and proprietary data across the organization

Responsibilities

  • Own and manage enterprise data security technologies including: ➢ DSPM (Data Security Posture Management) ➢ DLP (Data Loss Prevention) ➢ Data discovery and classification platforms
  • Define product strategy, roadmap, and lifecycle management for data security tooling
  • Ensure optimal deployment, adoption, and continuous improvement of solutions
  • Define and enforce enterprise-wide data classification frameworks
  • Establish and maintain standards for data handling, storage, and protection
  • Drive adoption of data labeling, encryption, masking, and tokenization practices
  • Ensure consistency of policies across structured and unstructured data
  • Lead prevention strategies for data leakage across endpoints, SaaS, cloud, and collaboration platforms
  • Monitor, investigate, and respond to data security incidents and breaches
  • Establish playbooks for incident response, root cause analysis, and remediation
  • Collaborate with SOC and IR teams to enhance detection and response capabilities
  • Enable secure use of data across: ➢ Cloud platforms (AWS, Azure, GCP) ➢ SaaS applications (M365, Salesforce, etc.) ➢ Endpoints and collaboration tools ➢ AI/ML and GenAI platforms
  • Balance security with business agility by implementing adaptive and risk-based controls Act as a trusted advisor to engineering and business teams on secure data usage

SKILLS

Must have

  • 7+ years of experience in information/data security, with strong focus on data protection
  • Hands-on experience with DLP, DSPM, and data discovery tools (e.g., Microsoft Purview, Symantec, Netskope, BigID, Varonis, etc.)
  • Strong understanding of data classification, governance, and lifecycle management
  • Experience investigating data leakage and breach incidents
  • Familiarity with cloud and SaaS security models
  • Strong knowledge of privacy regulations and compliance frameworks
  • Excellent stakeholder management and communication skills
  • Ability to translate business requirements into security controls

Nice to have

N/A