Data Security Engineer

STS Service Provisioning - Senior Security Analyst

Today's world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust.

In Information Security, we combine risk strategy, digital identity, cyber defense, application security, and technology solutions throughout the security lifecycle.You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through innovative, secure solutions that provide speed to market and business value.

The opportunity

The Security Technology Services (STS) group is a division of Information Security that ensures secure access to systems and information for more than 390,000 people in over 150 countries. You will be part of STS DLP Engineering Team specifically to support the Enterprise Data Loss Prevention (DLP) solution. The STS team is responsible for the delivery of DLP Services and the maintenance of the global DLP applications. The team is geographically dispersed and comprises of all disciplines required to deliver Data Security Services for our customers.

Your key responsibilities

The Senior Analyst will be primarily responsible for configuring Data Security Solutions like the enterprise Data Loss Prevention System. The main duties of this role will include helping to translate business requirements to secure data with our technical capabilities, especially overseeing the configuration of the DLP environments in a heterogenous global environment. This role requires strong hands-on experience in leading data security solutions with a strong focus on DLP. It will also participate in Data Access Governance Program development and assist in administering the program. The Senior Analyst will help to supervise and mentor junior analysts on the team.

The role will also interface with internal customers, stakeholders and support teams at various levels within the organization including Legal, Data Protection, IT Operations and Engineering.

Skills and attributes for success

• Technical knowledge in Data Protection technology (DLP, SIEM, SOAR, Data Access Governance, Networking)
• Administration of the DLP tools which includes configuring policies, upgrading, and patching, etc.
• Proven effective verbal and written communication skills
• Ability to independently research and solve technical issues
• Demonstrated integrity in a professional environment
• Knowledge of core Information Security concepts related to Governance, Risk & Compliance
• Excellent teaming skills
• Ability to work in and adapt to a changing environment
• Flexibility to adjust to multiple demands, shifting priorities, ambiguity and rapid change
• Ability to efficiently handle customer concerns and difficult situations with ease and professionalism

Essential Functions of the Job

• Work with vendors to support the different security technologies
• Configuration of the Security tools which includes configuring policies, response rules & notifications
• Work with Monitor & Response team to analyse alerts generating from various systems to tune their configuration
• Understand and follow the incident response process through event escalations
• Work with Senior level stakeholders (Risk Management, Compliance & Data Protection)
• Understand Business requirements and translate into technical controls
• Ability to work within and alongside diverse, global and virtual teams

To qualify for the role you must have

• Degree in Computer Science, Information Systems, Engineering or a related field.
• Knowledge of security controls: data classification; data labeling and data loss
• 3-5 years of experience in one or more of the following:
• Data Loss Prevention (DLP) Technology support and Event Handling
• Information Security concepts related to Governance, Risk & Compliance
• Supporting Information Security Technology
• English language skills - excellent written and verbal communication
• Exceptional judgement, tact and decision-making ability

Ideally, you'll also have

• Demonstrated integrity in a professional environment
• Ability to work within diverse, global, virtual teams
• Ability to appropriately balance firm security needs with business impact and benefit

What we look for

• Good interpersonal, communication and presentation skills
• Ability to deal with ambiguity and change, and exercise appropriate time management to meet deliverables
• Prioritization of work items to ensure timelines are achieved
• Good judgment, tact, and decision-making ability
• Deep critical thinking skills demonstrating analytical and systematic approach to problem solving
• Experience working in a global virtual environment
• Ability to work independently but also within a team environment