Data Protection Engineer

HM Health Solutions Inc. is hiring a Data Protection Engineer to implement, maintain, and support its data protection infrastructure and applications. The role also troubleshoots incidents, contributes to data protection projects and policies, and develops automation for DLP and data security posture management solutions.

Responsibilities:

• Implement and maintain components of the organization's data protection infrastructure across various platforms and vendors, ensuring optimal performance and security. This includes deploying and configuring DLP, DSPM, and data de-identification solutions
• Collaborate on the design and implementation of data protection solutions, following established best practices and aligning with business requirements. This includes working within on-premises and cloud-based environments (GCP, AWS, Azure)
• Configure and maintain data protection policies across relevant platforms, including configuring sensitive information types, tuning detection parameters, managing exception lists, and etc
• Troubleshoot and resolve data protection incidents, conducting root cause analysis and escalating complex issues as needed for effective remediation
• Contribute to data protection projects, assisting with tasks such as testing, implementation, and documentation, and participate in project meetings to provide updates
• Develop and maintain automation scripts (e.g., PowerShell, Python) to improve efficiency and support the deployment and maintenance of data protection software, following established coding standards and best practices
• Actively collaborate with team members to expand technical knowledge and expertise in data protection technologies
• Stay current with relevant data protection technologies, industry best practices, and evolving compliance requirements
• Other duties as assigned or requested

Requirements:

• 5 years of experience with Data Loss Prevention
• 5 years of experience with Information Security and Systems Analysis
• 5 years of experience with deploying and maintaining infrastructure for DLP software's
• 5 years of experience with creating and managing DLP policies
• Demonstrates ability to achieve stretch goals in a highly innovative and fast-paced environment
• Ability to communicate and present to other technology groups and leaders
• Strong teamwork and inter-personal skills
• Familiarity with secure SDLC best practices
• Strong sense of ownership, urgency, and drive
• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
• Kubernetes or other Container orchestration technologies
• Gitlab or other versioning control tools and processes
• Bachelor's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• 5 years of Information Security, Governance, Risk and/or Compliance, Information Technology or Business Analysis with at least 3 years of experience with hands-on Engineering principles
• 3 years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell etc.)
• 3 years of experience with designing and providing architectural support to at least two of the following cloud service providers: Google Cloud Platform, Amazon Web Services or Azure
• Master's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• CISSP
• Advanced certification in any of these cloud providers - GCP, AWS or Azure (E.g. Professional Cloud Architect/Security Engineer)
• Terraform or similar certification