Senior Data Protection Engineer

Old National Bank•Chicago, IL

About The Position

Old National is building a more mature enterprise data protection program, and we’re looking for a Sr. Data Protection Engineer to help shape that work within the IT organization. This is a hands-on opportunity to improve how sensitive and classified data is discovered, governed, monitored, and protected across the bank. The ideal candidate can translate policy, regulatory, privacy, and risk requirements into practical controls and sustainable operating processes.

Requirements

Bachelor’s degree in information security, information technology, computer science, risk management, or a related field; or equivalent education, certifications, and relevant work experience.
5 or more years of experience in data protection, information security, data governance, IT Security, risk management, or a related field.
Experience supporting or building data protection capabilities, programs, or controls.

Nice To Haves

Experience with Microsoft Purview, Varonis, or comparable data protection, classification, governance, or DLP platforms.
Experience using AI-enabled data protection capabilities, including data security posture management, sensitive data discovery and classification, access risk analysis, anomalous behavior detection, automated remediation workflows, and secure adoption of generative AI tools through platforms such as Microsoft Purview, Varonis, or comparable technologies.
Familiarity with data governance, privacy, or security frameworks such as DCAM, NIST Privacy Framework, FFIEC guidance, or similar industry practices.

Responsibilities

Implementing and improving data protection processes, controls, and technologies in an enterprise environment.
Hands-on knowledge of data discovery, classification, labeling, access, monitoring, retention, and data loss prevention processes.
Experience with data protection, classification, governance, monitoring, or data loss prevention tools and related operating processes.
Ability to translate policy, regulatory, privacy, and risk requirements into practical controls and operating processes.
Ability to communicate clearly with technical and non-technical stakeholders and influence practical data protection decisions.
Sound judgment when balancing data protection requirements, business needs, and operational practicality in a regulated environment.
Strong analytical, communication, and collaboration skills.