Information Security Engineer- Data Security

Responsibilities

• Process & Execution Test, deploy, and integrate Data Security solutions including Data Loss Prevention (DLP), labels, policies, and alert strategies.
• Respond to Data Loss Prevention (DLP) alerts while proactively providing education on data security principles to Sinclair’s end-user base.
• Research and risk assess Artificial Intelligence (AI) applications to determine the risk and impact to data privacy.
• Support Sinclair’s overall mission of AI adoption including helping with the deployment of AI functionality including Role Based Access Controls, Agent governance, and third-party AI usage.
• Support Sinclair’s cyber risk program through the coordination of policy exceptions with stakeholders, updating the risk registry, and co-developing remediation plans.
• Contributes to the development of information security policies, standards, and processes to enforce Sinclair compliance requirements.
• Deliver current and relevant training content to personnel to ensure data is handled and transmitted according to policies and standards.
• Provide quality and timely updates to internal customers to ensure clear expectations are met for their requests.
• Collaborate with peers to create and enhance weekly metrics to measure the effectiveness of the security program.
• Maintain ownership of assignments initiatives while maintaining a high level of personal accountability.
• Develop and communicate risk mitigation plans for security risks in SaaS applications including data exposures, integrations, and miscategorized data labels.

Qualifications

• Must Haves: Bachelor’s degree in an IT or cybersecurity discipline with 4 years of Information Security experience or 6 years of experience in lieu of a degree.
• Exceptional verbal and written communication skills with an ability to present complex information to audiences of varying subject knowledge.
• Minimum of two years’ experience with data loss prevention technologies and successfully labeling data.
• Prior experience classifying data and understanding the principles of advanced data protection.
• Prior hands-on experience with prompt engineering successfully creating custom GPTs to automate or streamline processes.
• Ability to verbally describe and address risks associated with Artificial Intelligence adoption.
• Knowledge of multi-cloud environments.
• Experience working in the commercial sector for a large enterprise environment.
• Prior experience with Insider Risk Management programs, developing monitoring strategies, and delivering meaningful metrics.
• Experience with automation tools such as Tines, Torq, or other orchestration solutions.
• Experience developing and customizing metrics including MS Excel, Power BI, Power Automate, etc.
• Familiarity with security assessments and compliance requirements frameworks (SOC-2, NIST “800 series”, ISO, CSF, SOX, etc.).
• Prior experience in the broadcast/media entertainment industries preferred.

Benefits

• Participation in a retirement plan
• Life and disability insurance
• Health, dental and vision plans
• Flexible spending accounts
• 15 paid vacation days
• 2 paid personal days
• 9 paid holidays
• 40 hours of paid sick leave
• Parental leave
• Employee stock purchase plan