Security Operations Vice President - Data Loss Prevention

JPMorgan Chase • Westerville, OH

328d

About The Position

Be part of a dynamic team where your distinctive skills will contribute to a winning culture and team. As a Security Operations Vice President in our global team of technologists and innovators, you will significantly impact our company, clients, and business partners worldwide. You'll guide a highly motivated team in analyzing, designing, developing, and delivering solutions to counter adversaries and enhance our operations. Your contributions will help identify internal threat indicators and prevent sensitive data loss using world-class tools and technology.

Requirements

• 7 or more years of cybersecurity operations or SOC related experience with 2 years as a technical lead with strong project management skills.
• Deep understanding of cybersecurity practices, Data Loss Prevention concepts, security incident triage, Insider Threat, and operations risk management processes, along with architectural requirements, engineering threats, vulnerabilities, and incident response methodologies.
• Proven experience in managing and configuring DLP and EDR solutions in large-scale enterprise environments, with expertise in Information Protection/Sensitivity Labels, Data Loss Prevention, Secure Browsers and Insider Risk/Threat Management.
• Proficient in scripting with PowerShell, Python, JavaScript and knowledgeable in regular expressions and APIs.
• Experience in developing and implementing new DLP or Insider Threat programs using tools like Palo Alto DLP, CASB, Microsoft Purview, Symantec DLP, Crowd Strike, Island Browser and Splunk or other SIEM tool.
• Excellent analytical and problem-solving skills, capable of translating complex technical concepts into practical solutions based on risk assessment and risk appetite.

Nice To Haves

• Possess two or more of the following certifications - Microsoft Certified: Security, Compliance and Identity Fundamentals, Broadcom DLP Administrator, Palo Alto Networks Certified Network Security Administrator, Cybersecurity Architect Expert, Security Operations Analyst Associate, Azure Security Engineer, CISSP, Splunk Certified Power User.
• Experience with Agile methodology and the ability to work with at least one of the common frameworks with knowledge of tools like Confluence, JIRA and ServiceNow.
• Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with a focus on recommendations for enhancements or remediation based on in-depth risk assessment.
• Good understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity and foundational knowledge of computer forensics; legal, government and jurisprudence as they relate to cybersecurity; operating systems; and methods for intelligence gathering and sharing.

Responsibilities

• Guide a highly motivated team in designing, configuring, and implementing Data Protection and DLP policies using Microsoft Information Protection (Microsoft Purview), Broadcom (Symantec) DLP, and Palo Alto DLP, both on-premises and in the cloud, utilizing CASB and Cloud Proxy at the enterprise level.
• Leverage scripting skills in Python, PowerShell, and JavaScript to automate tasks and workflows, and use API working knowledge to integrate various DLP solutions with SIEM, CASB and UEBA tools.
• Provide technical expertise to manage, configure, and optimize Palo Alto DLP, CASB, and Cloud Proxy solutions, Broadcom (Symantec) DLP, and Microsoft 365 Security Solutions while producing reports on program status and progress for senior management.
• Lead incident response, conduct risk reviews, assess policies, and identify new threat vectors, driving the development of new data identifiers, data governance policies, and standards to ensure compliance and data integrity.
• Use strong communication skills to present findings and solutions related to existing and emerging threats in the data loss prevention/internal threat arena to senior leaders and stakeholders.
• Collaborate with stakeholders and businesses to provide guidance on best practices, define data management requirements, and establish effective controls, practices, and procedures, delivering cost-effective strategic solutions that prioritize our clients.
• Assist in training and retaining talent and identify growth opportunities for junior team members for talent development.

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Credit Intermediation and Related Activities