Data Loss Prevention Engineer

BMO•Toronto, ON

1d•CA$82,800 - CA$154,800•Hybrid

About The Position

In a team at the forefront of protecting critical financial data across the enterprise. In this role, you’ll focus on strengthening data loss prevention (DLP) capabilities to protect sensitive data exfiltration using leading DLP tools and modern security practices—including emerging AI risk controls. You’ll work across business lines, technology teams, and senior stakeholders, giving you broad visibility and the opportunity to influence a mature and evolving data protection program. This is a unique opportunity to build in-demand cybersecurity expertise, and work with industry-leading tools to grow your career within a stable, highly respected organization that prioritizes security, collaboration, and innovation. This is a HYBRID role based in the office location noted in this posting

Requirements

3 yrs of experience with any DLP tools and DSPM ( data security posture management approach on data security).
Experience with Implementing and managing DLP solutions to protect data in motion, at rest, and in use across enterprise environments.
DLP tools : Netskope, Proofpoint, MS Purview with 3+ years experience and Cloud & SaaS security knowledge as well as test and validate incidents from your tests
3+ years in PowerShell Scripting & Programming: Experience with creating and maintaining automation scripts and tools to streamline security operations and data protection processes.
3+ years experience with MS Power Tools ( Power BI, Power Apps, and Power Automate) as well as other MS Tools: Leverage Microsoft Power Platform and related tools to build automated workflows and enhance security and compliance operation.
1-2 years with AI Security and understand data exposure risks in AI Workflows : Design and enforce security controls to mitigate risks associated with AI systems, models, and data usage.
Foundational knowledge of AI Fundamentals
Typically between 4 - 7 years of relevant experience and post-secondary degree in in Business or Computer Science, or a related field of study or an equivalent combination of formal training, or industry / technical certifications or work experience.
Has at least one certification in a related field, with strong preference for Information Security certifications from a well-recognized institution (e.g. (ISC)2, ISACA, SANS).
Understanding and problem solving ability of IS issues within their business group, appreciating the scope of complexity that exists in the operating environment and the ways which security platforms impact that environment - In-depth.
Experience in Information Security or with multiple areas of systems and computer operations (e.g. Identity & Access Management, IT operations, Certification & Key Management, Security Platform Administration, Security Incident Response)
Understanding and problem solving ability of information security issues within their business group - In-depth.
Partnering, communication, and negotiation skills to communicate effectively within the team and with technology and business partners - In-depth.
Understands the scope of complexity that exists in the operating environment and the ways which security platforms impact that environment.
Knowledge of Information Security support and operations concepts, practices, concepts, and technology obtained through formal training and work experience.
Knowledge of Information Security processes, procedures and controls - In-depth.
Knowledge of the technical and business environment and the corporate processes and procedures - In-depth.
Understanding of Information Security risk and regulatory requirements.
Deep knowledge and technical proficiency gained through extensive education and business experience.
Verbal & written communication skills - In-depth.
Collaboration & team skills - In-depth.
Analytical and problem solving skills - In-depth.
Influence skills - In-depth.
Data driven decision making - In-depth.

Responsibilities

Implement and manage DLP Tools (DIM, DAR, DAE) to implement and manage DLP solutions
Scripting & Programming ( ideally in PowerShell) to develop and maintain automation scripts
Design and enforce security controls to mitigate risks associated with AI systems, models, and data usage.
Use AI/ML concepts to support secure and compliant AI implementations.
Usage of MS Power Tools and Automation to build automated workflows and enhance security and compliance operations.
Monitors, restores service, changes, supports and handles day-to-day activities 7/24/365 required to run the mission critical Information Security systems for BMO.
Provides responsive customer service in support of cyber security.
Builds effective relationships with internal/external stakeholders.
Anticipates and reduces complexity for others.
Prepares and delivers presentations for senior management.
Provides input into the planning and implementation of operational programs.
Develops and documents procedures and processes, conforming to the industry best practices and Bank’s security regulations, policies and standards.
Leads the preparation of end user reference materials.
Gathers requirements and documents these requirements for use in various audits, reports, & projects.
Acts in a larger project planning capacity, audits the quality of reports submitted by analysts and provides related coaching and support.
Performs governance and oversight in support of the team, by producing and reviewing reports to ensure completeness and compliance to applicable standards.
Monitors & maintains security tools and applications.
Creates activity reports for security tools and applications.
Collaborates with internal and external stakeholders in order to deliver on business objectives and to support operational activities for Information Security.
Develops an understanding of organizational interactions and complexity to engage with the appropriate matrix areas.
Actions service requests, transactions, queries etc. within relevant service level agreements.
Coordinates and facilitates incident management activities.
Includes deploying changes to the production environment and engaging 2rd party providers contracted to the Bank during an incident.
Recommends approaches or changes to streamline and integrates security processes and systems in the organization, while considering Information Security methodology to improve overall efficiency.
Provides technical Information Security subject matter expertise.
Identifies opportunities to strengthen the capability of the Information Security organization at BMO, such as: sharing expertise to promote technical development and mentoring employees.
Stays abreast of industry technical and business trends through participation in professional associations, practice communities and individual learning.
Ensures consistent, high quality practices/work and the achievement of business results in alignment with business/group strategies and with productivity goals.
Focus is primarily on business/group within BMO; may have broader, enterprise-wide focus.
Provides specialized consulting, analytical and technical support.
Exercises judgment to identify, diagnose, and solve problems within given rules.
Works independently and regularly handles non-routine situations.
Broader work or accountabilities may be assigned as needed.
Take measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations.