Data Loss Prevention - AVP

MUFG•Jersey City, NJ

1d•Hybrid

About The Position

The Assistant Vice President (AVP) – Data Loss Prevention (DLP) Engineering is a senior individual contributor responsible for implementing, operating, and enhancing enterprise DLP controls across email, endpoint, web, and cloud collaboration platforms. This role executes approved detection changes, leads pilots and validations, manages complex investigations and exceptions, and supports regulatory and audit requirements. The AVP partners with Security Operations, Compliance, Legal, Privacy, and business stakeholders to reduce data exfiltration risk while ensuring solutions are reliable, governed, and scalable.

Requirements

Bachelor’s degree or equivalent experience in Information Security, Computer Science, Engineering, or a related field.
Experience in Data Loss Prevention, information protection, or security engineering roles.
Hands‑on experience operating and configuring enterprise DLP technologies across multiple channels.
Knowledge of regulated data types (e.g., PII, PCI, PHI, CSI) and data protection controls.
Experience supporting security controls in regulated or audit‑driven environments.
Strong analytical, documentation, and cross‑functional collaboration skills.
Bachelor's degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience

Responsibilities

Perform advanced triage, investigation, and containment for DLP incidents across multiple channels, coordinating with GSOC and cross‑functional stakeholders as needed.
Implement approved DLP policy and detection changes in accordance with change‑management and separation‑of‑duties requirements.
Design, build, and validate custom Sensitive Information Types (SITs), classifiers, and detection enhancements.
Execute controlled pilots and testing to assess detection quality, business impact, and readiness for production release.
Assess and manage DLP exceptions, including risk evaluation, compensating controls, and remediation or drawdown activities.
Support audit and regulatory activities by maintaining control documentation, evidence, test results, and release artifacts.
Develop automation, monitoring, and reliability improvements to reduce operational risk and manual effort.
Analyze operational metrics and publish release notes, impact assessments, and remediation status updates.