IT Data Protection Security Engineer – Senior Manager
Company | Boston Consulting Group |
---|---|
Location | Boston, MA, USA, Stratford, London, UK, Atlanta, GA, USA |
Salary | $Not Provided – $Not Provided |
Type | Full-Time |
Degrees | |
Experience Level | Senior, Expert or higher |
Requirements
- Minimum 8+ years of data loss solutions and/or security engineering experience with large scale globally distributed implementations
- Extensive experience in data-at-rest and data-in-transit, data security techniques and methodologies
- Experience of using relevant DLP tools such as Symantec DLP, Zscaler CASB, MS Purview & similar
- Experience in managing DLP IM Management and have good understanding of end-to-end IM processes
- Experience of working with MS Defender and Intune
- Experience of using relevant IRM/Data Classification/Data Discovery tools
- Extensive experience in a globally distributed environment spanning multiple platforms such as AWS, Azure and GCP
- Experience of cloud security techniques in a DevSecOps and agile working environment
- Experience in understanding and capturing requirements, continuously improve and develop technical policies and processes
- Experience leading and mentoring fellow team members, across internal and vendor teams.
Responsibilities
- Engaging collaboratively with application development, data protection, information security, and risk management teams to understand and implement data security solutions.
- Supporting vendor assessments, including proof of concepts & security technologies research
- Continuously improving data protection services based on input from a diverse network of internal and external stakeholders, technology teams and security industry at large
- Creating and maintaining technical service roadmaps for our data protection services
- Contributing to both architectural and operational effectiveness of the Secure Data team.
Preferred Qualifications
- Familiarity with Secrets Management and/or Certificate Lifecycle Management
- Familiarity with cryptographic key management, PKI lifecycle management
- Familiarity with Cloud Security Posture Management & Cloud Workload Protection
- Understanding of CI/CD pipelines
- Understanding of infrastructure as a code and concepts
- Understanding of systems configuration orchestration
- Related security certifications (e.g. CISSP, CCSP, CCSK, SABSA, ITIL etc.)