Data Security Lead | Offshore

<div style="font-style:normal;font-weight:400;margin:0px;padding:0px;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;"><div style="margin:0px;padding:0px;"><h3>Data security posture management</h3></div><div style="margin:0px;padding:0px;"><ul><li>Discover and classify sensitive data (e.g., PII, PHI, financial data) across all data stores, including databases, SaaS applications, and cloud storage. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Assess data risk based on factors such as sensitivity, location, user access, and potential attack paths. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Continuously monitor the data environment for vulnerabilities, misconfigurations, and non-compliant data handling practices. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Enforce the Principle of Least Privilege by analyzing and managing data access permissions and entitlements to minimize the attack surface. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Remediate identified data risks by automating or directing actions, such as adjusting permissions, quarantining critical assets, or encrypting information. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Provide visibility into the data security landscape by creating reports and dashboards for stakeholders.  </li></ul></div><div style="margin:0px;padding:0px;"><h3>Data loss prevention</h3></div><div style="margin:0px;padding:0px;"><ul><li>Develop, configure, and maintain DLP policies and rules across various channels, including email, web, endpoints, and cloud applications. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Monitor DLP alerts and investigate potential data leakage incidents and policy violations. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Analyze DLP incidents to identify root causes and patterns of data exfiltration. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Perform tuning of DLP policies to reduce false positives and improve the accuracy of sensitive data detection. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Collaborate with incident response teams to contain and resolve data security incidents promptly. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Work with data owners and business units to understand their data handling needs and refine DLP policies accordingly.  </li></ul></div><div style="margin:0px;padding:0px;"><h3>Compliance and strategy</h3></div></div><div style="font-style:normal;font-weight:400;margin:0px;padding:0px;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;"><div style="margin:0px;padding:0px;"><ul><li>Ensure the organization's data protection practices align with regulatory requirements, such as GDPR and DORA. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Generate audit-ready reports and compliance assessments to demonstrate adherence to relevant standards. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Help define and contribute to the broader enterprise data protection strategy, considering the entire data lifecycle. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Educate employees and stakeholders on data security best practices to foster a security-conscious culture. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Stay up to date with emerging data security trends, threats, and technologies, including securing AI and LLM training data.  </li></ul></div><div style="margin:0px;padding:0px;"><h3>Qualifications</h3></div><div style="margin:0px;padding:0px;"><ul><li><strong>Education</strong>: A bachelor's degree in computer science, information security, or a related field is typically required. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li><strong>Experience</strong>: Several years of hands-on experience working with DLP and DSPM technologies in an information security role. </li></ul></div><div style="margin:0px;padding:0px;"><p><strong>Technical skills</strong>: </p></div><div style="margin:0px;padding:0px;"><ul><li>Experience with DSPM platforms (e.g., Wiz, Prisma Cloud, BigID). </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Proficiency with enterprise DLP solutions (e.g., Microsoft Purview, Symantec, Forcepoint). </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Familiarity with cloud platforms such as AWS and Azure. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Experience with SIEM tools for security event analysis. </li></ul></div><div style="margin:0px;padding:0px;"><ul><li>Understanding of data encryption, access controls, and network protocols. </li></ul></div></div><p>Originally posted on <a href="https://himalayas.app">Himalayas</a></p>