Support and enhance First American’s existing data security processes, standards, and tools across the enterprise
Work with the Data Security team to reduce risk for the organization by securing data, classifying and labeling sensitive data, and applying encryption or other security controls
Drive initiatives like expanding the use of Microsoft 365 Information Protection (MIP) and Purview Data Loss Prevention (DLP)
Own and mature the data classification, sensitivity labeling, and data loss prevention (DLP) strategy
Support regulatory, audit, and risk management requirements
Drive continuous improvement of data security controls
Monitor, triage, and investigate alerts and cases; collaborate with HR, Legal, and Security Operations
Solve problems, research alternatives, prepare presentations, and drive solutions pertaining to data security
Analyze data and report trends & metrics to business partners
Assist with the creation, maintenance, and updates of data security process documents
Partner with business units and data stewards to support data security initiatives across the enterprise
Be a subject matter expert for questions from end users and business stakeholders on topics such as data security policies, standards, and business processes
Participate in evaluation and selection of new technology

Minimum 3 years of relevant work experience in Information Security, IT Risk Management M365 EMS E5 stack of online services
Extensive experience working with Microsoft technologies and infrastructure, with an emphasis on Active Directory/AAD
Working knowledge of IT and Information Security control standards and frameworks (CIS, NIST, ISO27001, etc.) and financial services regulatory requirements (CCPA, PCI-DSS, etc.)
Familiarity with RegEx formulas, Sensitive Information Types (SITs), NPI/PI
Team player with positive energy and good customer service skills
Ability to work independently, demonstrates initiative, and is a self-starter
Understanding of modern cyber security methodologies and protocols
Excellent verbal and written communication skills
Experience in documenting processes, technical writing, and flow charts
Manage multiple initiatives simultaneously, with strong ability to prioritize
Customer focused in the context of balancing risk reduction with business needs
High attention to detail to manage, analyze and finalize artifacts and documents
Highly flexible, adapting to changes in priorities and requirements
Ability to quickly learn, communicate and apply technical concepts
Demonstrated judgement in effectively dealing with highly sensitive information

Senior Data Security Engineer

Key skills