Information Security Engineer - Data Protection & Insider Risk

ESSENTIAL RESPONSIBILITIES

• Designs, implements, and operates Data Loss/Leakage Prevention (DLP) controls across endpoints, email, cloud services, and SaaS platforms;
• Led and maintains data identification, classification, and labeling strategies for structured and unstructured data;
• Maintains data protection and insider risk detection and response programs, including behavioral analytics and user activity monitoring;
• Develops workflows for escalation, evidence handling, and remediation of insider risk incidents;
• Manages and optimizes identity and access governance (IAG) platforms, including access reviews, entitlement management, and lifecycle automation;
• Supports least-privilege access models, role-based access control (RBAC), and segregation of duties (SoD) initiatives;
• Integrates identity signals with data protection and insider risk tooling to enable contextual, risk-based controls;
• Serves as a subject matter expert for security platforms related to DLP, insider risk, data classification, and identity governance;
• Evaluates, onboards, and operationalizes new security tools and features;
• Creates and maintains runbooks, procedures, dashboards, and metrics to demonstrate program effectiveness.

Governance, Risk, and Collaboration

• Supports regulatory and compliance requirements related to data protection and access control (e.g., SOX, HIPAA, GDPR, CCPA, etc., as applicable);
• Provides guidance to IT and business teams on secure data handling and access practices;
• Contributes to security awareness efforts related to data handling, insider risk, and acceptable use.

AI & Generative AI Security (Technical Controls & Monitoring)

• Implements and operates security controls for Microsoft Copilot for M365 using Purview, Defender, and Entra ID to enforce access boundaries and reduce data exposure;
• Configures DLP, sensitivity labels, permissions, logging, and alerting to ensure AI-assisted access aligns with data classification and authorization models;
• Investigates and responds to data exposure or misuse involving Copilot or other AI-enabled workflows, and support secure onboarding of additional AI/LLM tools;
• Performs additional duties as assigned.