Data security posture management
Discover and classify sensitive data (e.g., PII, PHI, financial data) across all data stores, including databases, SaaS applications, and cloud storage.
Assess data risk based on factors such as sensitivity, location, user access, and potential attack paths.
Continuously monitor the data environment for vulnerabilities, misconfigurations, and non-compliant data handling practices.
Enforce the Principle of Least Privilege by analyzing and managing data access permissions and entitlements to minimize the attack surface.
Remediate identified data risks by automating or directing actions, such as adjusting permissions, quarantining critical assets, or encrypting information.
Provide visibility into the data security landscape by creating reports and dashboards for stakeholders. Data loss prevention
Develop, configure, and maintain DLP policies and rules across various channels, including email, web, endpoints, and cloud applications.
Monitor DLP alerts and investigate potential data leakage incidents and policy violations.
Analyze DLP incidents to identify root causes and patterns of data exfiltration.
Perform tuning of DLP policies to reduce false positives and improve the accuracy of sensitive data detection.
Collaborate with incident response teams to contain and resolve data security incidents promptly.
Work with data owners and business units to understand their data handling needs and refine DLP policies accordingly. Compliance and strategy
Ensure the organization's data protection practices align with regulatory requirements, such as GDPR and DORA.
Generate audit-ready reports and compliance assessments to demonstrate adherence to relevant standards.
Help define and contribute to the broader enterprise data protection strategy, considering the entire data lifecycle.
Educate employees and stakeholders on data security best practices to foster a security-conscious culture.
Stay up to date with emerging data security trends, threats, and technologies, including securing AI and LLM training data. Qualifications
Education: A bachelor's degree in computer science, information security, or a related field is typically required.
Experience: Several years of hands-on experience working with DLP and DSPM technologies in an information security role.
Technical skills:
Experience with DSPM platforms (e.g., Wiz, Prisma Cloud, BigID).
Proficiency with enterprise DLP solutions (e.g., Microsoft Purview, Symantec, Forcepoint).
Familiarity with cloud platforms such as AWS and Azure.
Experience with SIEM tools for security event analysis.
Understanding of data encryption, access controls, and network protocols.
