AVP, Data Loss Prevention Engineer

Synchrony•Cincinnati, OH

6d•$100,000 - $170,000•Hybrid

About The Position

The AVP, Data Loss Prevention Engineer is part of the Information Security organization’s Data Protection Engineering team and is responsible for driving an enterprise-wide data loss prevention program. The role safeguards organizational data by developing and modifying DLP policies and rules to identify, detect, and protect data, and to reduce the risk of data exfiltration. The engineer works with cybersecurity teams and business stakeholders to define DLP strategy and roadmap and influence delivery of an effective data loss prevention service. The position supports the Data Protection product owner, develops and manages DLP metrics, monitors emerging threats, and serves as a subject matter expert and trusted advisor to IT and business stakeholders. It also helps ensure security capabilities reflect industry best practices and meet compliance and regulatory requirements such as PCI-DSS and HIPAA. Synchrony offers flexibility to work from home near a Hub or from an office. The employee must commute to the nearest virtual or physical Hub for in-person engagement activities, including regular business or team meetings, training, and culture events. Business travel may be required as needed.

Requirements

Bachelor’s degree and at least 5 years of experience in Information Security, Engineering, Application Development, or a related field; alternatively, a High School Diploma/GED and at least 7 years of equivalent work experience.
At least 5 years of experience in a data loss prevention role.
Ability and flexibility to travel for business as required.
Must be at least 18 years old and have a high school diploma or equivalent.
Must be willing to take a drug test, undergo a background investigation, and submit fingerprints as part of onboarding.
Must satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.
Legal authorization to work in the United States is required; employment visa sponsorship is not available.

Nice To Haves

Understanding of how emerging business and end-user technologies affect information security requirements and architecture.
Understanding of business needs and commitment to delivering high-quality, prompt, and efficient service.
Strong decision-making skills and a track record of evaluating costs and benefits to identify appropriate actions.
Technical expertise in security and IT systems and ability to keep pace with changing technologies.
Strong interpersonal skills and experience influencing people at all organizational levels and across functions.
Team-focused approach and experience working effectively with diverse stakeholders.
Experience communicating complex technical issues clearly and actionably to diverse audiences, verbally and in writing.

Responsibilities

Design and build effective DLP policies and rules to protect and safeguard organizational data.
Support the Data Protection product owner in defining intent, roadmap, and strategy and in executing and delivering the DLP roadmap.
Support development and management of Data Loss Prevention metrics.
Stay current with the emerging threat landscape and develop or enhance capabilities and strategies to safeguard the business from data exfiltration.
Serve as a subject matter expert in solving DLP problems, particularly those related to the Data Protection security service.
Partner with key stakeholders to align sensitive data with DLP capabilities.
Serve as a DLP expert, trusted advisor, and central point of contact for IT and business stakeholders.
Assist in developing standards, best practices, and guidelines for organizational policies, standards, and procedures.
Help ensure cybersecurity capabilities meet industry best practices and compliance and regulatory requirements, including PCI-DSS and HIPAA.
Perform other duties and special projects as assigned.