Security Specialist - Data Protection

PNC Bank•Denver, CO

1d•Onsite

About The Position

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Specialist within PNC's Technology organization, you will be based in Pittsburgh, PA, .Strongsville, OH, Dallas, TX, Birmingham, AL, Denver, CO, Phoenix, AZ. We are seeking an experienced Senior Data Protection Engineer / Analyst to join our Enterprise Data Protection team. This role will be responsible for designing, implementing, monitoring, and continuously improving data protection controls across the organization. The ideal candidate will possess deep expertise in Data Loss Prevention (DLP), insider threat investigations, data discovery, classification, and governance, with hands-on experience in both Symantec DLP and Microsoft Purview environments.

Requirements

3+ years of Data Loss Prevention (DLP) experience.
3+ years of Symantec DLP administration and engineering experience.
3+ years of Microsoft Purview experience supporting data protection and compliance capabilities.
Experience supporting Insider Threat monitoring, investigations, and remediation activities.
Experience performing structured and unstructured data scanning and discovery.
Symantec DLP
Microsoft Purview DLP
Endpoint DLP
Exact Data Matching (EDM)
Data Classification and Labeling
Structured and Unstructured Data Discovery
Microsoft 365 Security & Compliance
Insider Threat Monitoring and Investigations
Incident Response and Digital Investigations
Data Governance
Sensitive Information Types (SITs)
Data Protection Policy Development
Risk Assessment and Control Design
University / college degree, with 5+ years of industry-relevant experience.
Specific certifications are often required.
In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
Bachelors

Nice To Haves

Experience protecting data across Microsoft 365, SharePoint Online, OneDrive, Teams, and Exchange Online environments.
Experience with Microsoft Defender security technologies.
Understanding of information protection and sensitivity labeling.
Access Control (AC)
Building Architecture
Customer Solutions
Disaster Recovery Planning
Information Security
Network Security
Physical Security
Risk Assessments
Security Technologies
Analytical Thinking
Effective Communications
Information Assurance
Information Security Management
Information Security Technologies
IT Environment
IT Standards, Procedures & Policies
IT Systems Management
Problem Solving
Software Security Assurance

Responsibilities

Design, implement, and maintain enterprise Data Loss Prevention (DLP) controls and policies.
Administer and support Symantec DLP and Microsoft Purview Data Protection technologies.
Monitor and investigate DLP alerts, policy violations, and insider threat activities.
Perform structured and unstructured data discovery, classification, and risk assessments.
Develop and maintain data classification and labeling standards.
Configure and manage Exact Data Matching (EDM) repositories and detection rules.
Implement and optimize endpoint DLP controls across enterprise endpoints.
Collaborate with Security Operations, Risk Management, Compliance, Legal, and Human Resources teams during investigations.
Analyze data flows and identify opportunities to strengthen data protection controls.
Support data governance initiatives, regulatory compliance efforts, and risk management programs.
Develop reporting and metrics related to data protection effectiveness and program maturity.
Participate in incident response and digital investigation activities involving sensitive data exposures.
Provides technical evaluation and analysis in a specific Security area.
Supports activities, process, and tools needed to improve overall security posture of the organization.
Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.
Performs investigation and data loss prevention, data manipulation, and coordination of activities.
Performs actions to address or mitigate risks and vulnerabilities.
Reviews and defines controls.
Advises on more complex security procedures and products for clients, security administrators and network operations.
Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion.
Shares knowledge with staff.
Conducts security assessments and other information security routines consistently.
Investigates and recommends corrective actions for data security related to established guidelines.
Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats.
Oversees that business needs are being met during development.

Benefits

medical/prescription drug coverage (with a Health Savings Account feature)
dental and vision options
employee and spouse/child life insurance
short and long-term disability protection
401(k) with PNC match
pension and stock purchase plans
dependent care reimbursement account
back-up child/elder care
adoption, surrogacy, and doula reimbursement
educational assistance, including select programs fully paid
a robust wellness program with financial incentives
maternity and/or parental leave
up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
between 15 to 25 vacation days each year, depending on career level; and years of service.