DSPM Implementations Engineer
About The Position
Deloitte is seeking a data protection professional for its Cyber team to build and mature Data Security Posture Management (DSPM) capabilities, with supporting Data Loss Prevention (DLP) expertise. The role works with security, privacy, data governance, IT stakeholders, and data owners to understand sensitive-data handling, establish practical governance, and improve discovery, classification, monitoring, and protection across SaaS, cloud, and other environments. The role focuses on DSPM program development and implementation, including stakeholder engagement, data classification and tagging, policy tuning, and integrations. It also requires hands-on experience with DLP controls as part of a broader data protection program. The position is part of Deloitte’s Government & Public Services practice and Digital Trust & Privacy offering, within the Deloitte US Delivery Center model. The work is hybrid, with residence within commuting distance of an eligible delivery-center or Geo-Hub location and up to 30% co-location at an assigned office or other approved location. Overnight travel is capped at 10%.
Requirements
- Bachelor’s degree.
- At least 3 years of cybersecurity experience, including experience implementing DSPM and DLP capabilities.
- Experience establishing or expanding a DSPM program, including governance, operating models, processes, and measures of effectiveness.
- Experience configuring DSPM platforms such as Cyera, Varonis, Netskope DSPM, or BigID; applying data classification and tagging; tuning DSPM rules or policies; and integrating capabilities with SaaS applications, cloud environments, identity and access controls, and security operations workflows.
- Experience designing, implementing, and tuning DLP controls across endpoint, email, web, and cloud channels using Microsoft Purview, Forcepoint, Symantec, Digital Guardian, Netskope, or Zscaler.
- Reside within commuting distance of the assigned office and be able to commute daily if required without overnight accommodations.
- Ability to travel an average of 10%, with a maximum of 10% overnight travel for client or project purposes.
- Legally authorized to work in the United States without employer sponsorship now or in the future.
- For the hybrid work model, reside within commuting distance of a US Delivery Center location (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub location (Atlanta, Charlotte, Dallas, Houston, or Philadelphia).
- Ability to work independently and collaboratively as part of a team.
- Effective written and verbal communication skills, meticulous attention to detail, and commitment to quality work.
- Ability to build and sustain professional relationships and demonstrate strong interpersonal skills and a professional demeanor.
- Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
Nice To Haves
- Experience developing or operating data governance, privacy, or security operating models.
- Experience applying NIST SP 800-53, CJIS, IRS Publication 1075, or HIPAA requirements to data protection controls.
- Experience integrating DSPM or DLP with SIEM or SOAR platforms.
- CISSP, CompTIA Security+, CISM, or SC-401 certification.
- Experience using PowerShell or Python for automation and reporting.
Responsibilities
- Build and mature a DSPM program, including governance, an operating model, processes, and measures of effectiveness.
- Partner with security, privacy, data governance, IT, and data owners to assess data ownership, business context, protection needs, and remediation priorities.
- Discover and assess sensitive data across SaaS applications, cloud environments, and other data stores; define and apply data classification and tagging approaches.
- Configure and tune DSPM rules, policies, and risk findings, and integrate DSPM capabilities with SaaS platforms, cloud environments, identity and access controls, DLP tools, and security operations workflows.
- Translate DSPM findings into prioritized remediation plans.
- Design, implement, and tune DLP controls across endpoint, email, web, and cloud channels.
- Develop program documentation, operating procedures, and stakeholder reporting.
- Support audit and compliance evidence requests.
- Lead projects or workstreams, prioritize multiple tasks, provide clear guidance, and meet deadlines.
Benefits
- The posting states that employees are offered a broad range of benefits, but does not specify individual benefits.
- Eligible to participate in a discretionary annual incentive program, subject to program rules and applicable factors.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
