AVP, Data Loss Prevention Engineer

Synchrony • Orlando, FL

1d • $100,000 - $170,000 • Hybrid

About The Position

The AVP, Data Loss Prevention Engineer is part of the Information Security organization’s Data Protection Engineering team and is responsible for driving an enterprise-wide data loss prevention program to safeguard organizational data. The role develops and modifies DLP policies and rules to identify, detect, and protect data and reduce the risk of data exfiltration. It works with cybersecurity teams and business stakeholders to define data loss prevention strategy and roadmap and influence delivery of the data protection service.

The position supports the Data Protection product owner in defining roadmap intent and strategy, develops and manages DLP metrics, and keeps capabilities aligned with emerging threats, business needs, industry best practices, and applicable compliance and regulatory requirements. It serves as a subject matter expert, trusted advisor, and central point of contact for IT and business stakeholders.

The role offers flexibility to work from home near a Synchrony Hub or from an office, with required attendance at the nearest Hub for in-person engagement activities such as regular meetings, training, and culture events. Business travel may be required. The annual salary range is $100,000 to $170,000, with eligibility for an annual bonus based on individual and company performance. Actual compensation depends on work experience, skill level, or knowledge, and salaries are adjusted according to market in CA, NY Metro, and Seattle.

Requirements

• Bachelor’s degree and at least 5 years of experience in Information Security, Engineering, Application Development, or a related field; or, in lieu of a degree, a High School Diploma/GED and at least 7 years of equivalent work experience.
• At least 5 years of experience in a data loss prevention role.
• Ability and flexibility to travel for business as required.
• Must be 18 years or older.
• Must have a high school diploma or equivalent.
• Must be willing to take a drug test, submit to a background investigation, and submit fingerprints as part of onboarding.
• Must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.
• Legal authorization to work in the U.S. is required; employment visa sponsorship is not available now or in the future.

Nice To Haves

• Understanding of the impact of emerging business and end-user technologies on information security requirements and architecture.
• Understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business.
• Strong decision-making capabilities, including weighing relative costs and benefits and identifying appropriate actions.
• Technical expertise in existing security and IT systems and ability to keep pace with changing security and IT technologies.
• Strong interpersonal skills and experience effectively influencing others at all organizational levels and cross-functionally.
• Team-focused approach and experience working effectively with diverse stakeholders.
• Experience communicating complex and technical issues verbally and in writing to diverse audiences in an easily understood and actionable manner.

Responsibilities

• Design and build effective DLP policies and rules to protect and safeguard organizational data.
• Support the Data Protection product owner in defining intent, roadmap, and strategy to ensure execution and delivery of the data loss prevention roadmap.
• Support development and management of Data Loss Prevention metrics.
• Stay current with the emerging threat landscape and develop or enhance capabilities and strategies to safeguard the business from data exfiltration.
• Act as a subject matter expert to help solve data loss prevention problems, especially those related to the Data Protection security service.
• Partner with key stakeholders to align sensitive data with data loss prevention capabilities.
• Serve as a data loss prevention expert, trusted advisor, and central point of contact for IT and business stakeholders.
• Assist with developing standards, best practices, and guidelines for organizational policies, standards, and procedures.
• Ensure cybersecurity capabilities follow industry best practices and meet compliance and regulatory requirements, including PCI-DSS and HIPAA.
• Perform other duties and/or special projects as assigned.

Benefits

• Annual bonus eligibility based on individual and company performance
• Flexible work arrangement with the option to work from home near a Hub or from an office

What This Job Offers

• Job Type: Full-time
• Career Level: Senior