Data Security Engineer

You will shape how the firm identifies, protects, and governs sensitive data across workplace and cloud environments. You will have hands-on ownership of the control estate within Infrastructure Security, reporting to the Head of Infrastructure Security. Specifically, you will:

• Design and operate enterprise data loss prevention controls across endpoints, email, collaboration platforms, and cloud storage
• Deploy data protection policies across email, file storage, collaboration platforms, and endpoint devices
• Build and maintain the classification taxonomy, sensitivity labels, auto-labeling rules, sensitive information types, and trainable classifiers that improve policy matching
• Administer data access governance controls that identify overexposed, stale, and sensitive data and support least-privilege remediation
• Extend classification and protection coverage to databases, SaaS applications, and cloud object storage