Job Summary
The Sr. Data Protection Engineer is responsible for leading the organization's efforts to identify, assess, and evaluate potential vulnerabilities and threats to the organization's Classified data. This includes conducting regular data risk assessments, recommending controls and countermeasures to mitigate identified risks, and monitoring the effectiveness of the implemented security measures.
Salary Range
The annual salary range for this position is $77,900.00 - $153,000.00. Final compensation will be determined by location, skills, experience, qualifications and the career level at which the position is filled.
Key Accountabilities
Develop and Implement data protection strategies and initiatives, including classification and handling, data access controls, inventory, encryption, and retention.
Work closely with other stakeholders to enforce data protection related policy and respond to regulatory requirements.Develop and maintain data security policies, procedures, standards, and ensure that they are followed by the entire organizationWork with cross-functional teams to create and maintain data inventories and data flows, and manage data sharing controlsDrive the design and implementation of data access controls, ensuring only authorized access to Classified dataCO-develop and implement data retention policy and procedures, ensure compliance with internal policy and external regulationsEnforce data encryption standards and strategies to secure data at rest and in transitLead incident response efforts related to data breach and work with stakeholders to mitigate impactLead and conduct regular data risk assessments to identify potential vulnerabilities and threats to the organization's data and information systemsStay abreast of new developments in the field of cybersecurity and ensure that the organization's risk assessment and data security processes are aligned with industry standards and best practicesRepresent the organization in external meetings and interactions with clients, stakeholders, and other industry experts as neededKey Competencies for Position
- Proven experience with data discovery, classification, handling, access, inventory, and retention
- Proven experience with data protection technologies, such as encryption, tokenization and data loss prevention tools.
- Experience with designing and implementing data security solutions for enterprise environments
- Strong understanding of data protection regulations and standards.
- Experience in developing and implementing data protection strategies and frameworks.
- Excellent analytical and problem-solving skills.
- Strong communication and interpersonal skills.
- Ability to work cross-functionally and collaborate with various teams.
Qualifications and Education Requirements
- Bachelor's degree in information security, Risk Management, or a related field.
- Minimum of 5 years of experience in data protection, information security, or risk management.
- Familiarity with data governance frameworks (e.g., DCAM, NIST Privacy Framework, FFIEC).
