Data Protection & AI Security, Staff Engineer

The Hershey Company • Lower Swatara Township, PA

1d • Remote

About The Position

The Staff Security Engineer, Data Protection & AI Security, serves as the strategic technical leader responsible for advancing the enterprise data protection program. This role partners with Information Security, IT, Data Governance, and Legal stakeholders to define the long-term strategy for protecting sensitive data across the organization, including emerging risks associated with artificial intelligence. The position is responsible for developing the data protection roadmap, translating governance priorities into technical initiatives, and leading the design and implementation of security controls that protect sensitive data across endpoints, cloud services, collaboration platforms, and AI systems. This role combines technical expertise, cross-functional leadership, and program execution to ensure the organization’s data protection capabilities evolve alongside new digital capabilities and regulatory expectations.

Requirements

• Deep expertise in enterprise data protection concepts including data classification, DLP, insider risk, and secure data lifecycle management
• Strong understanding of risks associated with artificial intelligence, generative AI platforms, and data exposure
• Experience implementing enterprise data protection technologies such as data classification, data loss prevention, or data security posture management platforms
• Ability to lead cross-functional initiatives involving Security, IT, Legal, and Data Governance teams
• Strong technical architecture skills across enterprise infrastructure including cloud platforms, endpoints, and collaboration tools
• Excellent communication skills with the ability to influence both technical and executive stakeholders

Nice To Haves

• Familiarity with security risks and controls related to artificial intelligence and large language models
• Experience in establishing and continuous tracking of KPI’s and metrics

Responsibilities

• Lead the strategic evolution of the enterprise data protection program by identifying risks, defining long-term capabilities, and developing the technical roadmap required to protect sensitive information across the enterprise.
• Lead the architecture and implementation of technical solutions that prevent unauthorized access, exposure, or misuse of sensitive information.
• Collaborate with cross-functional stakeholders to ensure sensitive data is properly owned, classified, governed, and protected.
• Develop service delivery and workstream processes

What This Job Offers

• Job Type: Full-time
• Career Level: Senior