Data Security Engineer

Morgan Street Holdings

39d•CA$100,000 - CA$110,000•Remote

About The Position

The Data Security Engineer will play a pivotal role in creating secure environments that enable creative teams to innovate confidently, knowing their work is protected. The Data Security Engineer will develop and influence DLP strategies, provide direction, assess risks, and serve as subject matter expert on security controls for sensitive data types, responsible for developing, implementing, and maintaining data protection technical controls. Will serve as the key point of contact for data security and privacy matters, ensuring compliance with relevant laws and standards such as GDPR, HIPAA, or other applicable regulations. Advises and influences across the operating company to improve the management of sensitive data types. Reviews applicable federal and state directives or regulations; then designs and provides guidance on the deployment of processes and solutions necessary to achieve and maintain alignment or compliance. Develop and implement solutions to ensure privacy policies are correctly implemented. The implementations should advance compliance with legal forms of data use as well as support business use of data. Work to align advanced technologies and Privacy by Design principles from the first stages of development and ensure that the data use meets established regulatory compliance needs. Collaborate with data product development teams creating new uses of data that employ privacy features. Interacting with internal privacy program managers, product development teams, legal, compliance, governance and data protection teams. Guide the development of new privacy products and features. Identify areas of improvement in local practices relative to managing data privacy.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, or related field.
Proven experience in data protection, information security, or privacy roles.
Strong understanding of data protection regulations (GDPR, CCPA, etc.).
Knowledge of cybersecurity frameworks and best practices.
Excellent analytical, problem-solving, and communication skills.
Ability to work collaboratively across departments and with external stakeholders.

Nice To Haves

Certifications such as CIPP, CIPM, CISSP, or CISM are a plus.

Responsibilities

Develop and enforce data protection policies, standards, and procedures.
Monitor data access and usage to prevent unauthorized activities.
Collaborate with IT, legal, and operational teams to implement security measures.
Support response efforts related to data breaches or information security incidents.
Provide training and awareness programs for staff on data protection best practices.
Maintain up-to-date knowledge of data protection laws and industry standards.
Prepare reports and documentation for compliance audits and regulatory authorities.