Information Security Engineer- Data Security

The Information Security Engineer will be a part of the enterprise Data Security and Governance, Risk, & Compliance program with focus on developing and scaling data security controls, insider risk management, AI-adoption, and cyber-automation. 

The applicant will have prior hands-on technical experience with engineering, testing, and deploying data security and loss prevention controls in a complex enterprise environment. Additional position requirements include the ability to classify data, accurately deploying and tuning labels, triaging alerts, risk assessing AI technologies, and training staff on data security best practices.  

The candidate must be a self-starter with the motivation to learn and contribute to new technologies and processes, remain flexible to shifting priorities while being organized and able to work across functional teams. The ideal candidate will also be able to operate independently while successfully executing on all assignments. 

The ability to verbally present ideas clearly and thoughtfully to large audiences at different levels of the organization is required.

This is a hybrid position which will require the candidate to work on-site in Hunt Valley Maryland several times per week.

Responsibilities:

Process & Execution

• Test, deploy, and integrate Data Security solutions including Data Loss Prevention (DLP), labels, policies, and alert strategies. 
• Respond to Data Loss Prevention (DLP) alerts while proactively providing education on data security principles to Sinclair’s end-user base.
• Research and risk assess Artificial Intelligence (AI) applications to determine the risk and impact to data privacy.
• Support Sinclair’s overall mission of AI adoption including helping with the deployment of AI functionality including Role Based Access Controls, Agent governance, and third-party AI usage.
• Support Sinclair’s cyber risk program through the coordination of policy exceptions with stakeholders, updating the risk registry, and co-developing remediation plans.
• Contributes to the development of information security policies, standards, and processes to enforce Sinclair compliance requirements.
• Deliver current and relevant training content to personnel to ensure data is handled and transmitted according to policies and standards.
• Provide quality and timely updates to internal customers to ensure clear expectations are met for their requests. 
• Collaborate with peers to create and enhance weekly metrics to measure the effectiveness of the security program. 
• Maintain ownership of assignments initiatives while maintaining a high level of personal accountability.
• Develop and communicate risk mitigation plans for security risks in SaaS applications including data exposures, integrations, and miscategorized data labels.

Collaboration & Partnerships

• Apply excellent communication skills to efficiently collaborate with company stakeholders and business partners.
• Evaluate and recommend new products, maintain knowledge of emerging technologies, and maximize value from existing tool sets to ensure return on investment. 
• Demonstrate strong problem-solving skills by identifying gaps or issues and develop engineering
• Communicate Sinclair policy and standards requirements to the organization to ensure compliance is being met.
• Promptly and proactively respond to information security tickets and other requests while effectively communicating with your team and customers.

Performance Improvement

• Flourish within an environment where priorities are frequently adjusted and the ability to multitask comes as second nature.
• Maintain a high-level of work quality while operating comfortably in a fast-paced environment and culture that emphasizes the importance of effective communication.
• Proactively and effectively look for ways to improve and optimize processes including automation and safe AI integration. 

Keys to Success:

• Be a self-starter

• Be willing to go the extra mile

• Over communicate 

• Remain flexible and resilient

• Have a good attitude

• Be a team player

• Have a desire to learn

• Ability to multitask
• Willingness and ability to automate manual tasks

Qualifications- Must Haves

• Bachelor’s degree in an IT or cybersecurity discipline with 4 years of Information Security experience or 6 years of experience in lieu of a degree.
• Exceptional verbal and written communication skills with an ability to present complex information to audiences of varying subject knowledge. 
• Minimum of two years’ experience with data loss prevention technologies and successfully labeling data.
• Experience deploying and configuring enterprise security tools focused on Data Loss Prevention and Insider Risk Management (MS Purview DSPM, DSPM for AI, Varonis, Zscaler). 
• Prior experience classifying data and understanding the principles of advanced data protection.
• Prior hands-on experience with prompt engineering successfully creating custom GPTs to automate or streamline processes.
• Ability to verbally describe and address risks associated with Artificial Intelligence adoption.
• Knowledge of multi-cloud environments.
• An industry certification that displays commitment to your career and craft. 
• Experience working in the commercial sector for a large enterprise environment. 
• Prior experience with Insider Risk Management programs, developing monitoring strategies, and delivering meaningful metrics. 
• Prior experience with automation tools such as Tines, Torq, or other orchestration solutions. 
• Experience developing and customizing metrics including MS Excel, Power BI, Power Automate, etc. 
• Familiarity with security assessments and compliance requirements frameworks (SOC-2, NIST “800 series”, ISO, CSF, SOX, etc.).
• Prior experience in the broadcast/media entertainment industries preferred.

Qualifications - Preferred

• Experience working in the commercial sector for a large enterprise environment. 
• Prior experience with Insider Risk Management programs, developing monitoring strategies, and delivering meaningful metrics. 
• Prior experience with automation tools such as Tines, Torq, or other orchestration solutions. 
• Experience developing and customizing metrics including MS Excel, Power BI, Power Automate, etc. 
• Familiarity with security assessments and compliance requirements frameworks (SOC-2, NIST “800 series”, ISO, CSF, SOX, etc.).
• Prior experience in the broadcast/media entertainment industries preferred.

Please note that this position is not eligible for visa sponsorship, including employer sponsorship for an H-1B visa, OPT-STEM employment, etc.

Sinclair is proud to be an equal opportunity employer and a drug free workplace. Employment practices will not be influenced or affected by virtue of an applicant's or employee's race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, military or veteran status or any other characteristic protected by law.

About Sinclair:

Sinclair, Inc. (Nasdaq: SBGI) is a diversified media company and a leading provider of local news and sports. The Company owns, operates and/or provides services to 177 television stations in 79 markets affiliated with all major broadcast networks; owns Tennis Channel, the premium destination for tennis enthusiasts; and multicast networks CHARGE, Comet, ROAR and The Nest. Sinclair’s AMP Media produces a growing portfolio of digital content and original podcasts. Additional information about Sinclair can be found at www.sbgi.net.

 About the Team

The life-blood of our organization is our people. We have a compelling story, a goal-oriented culture, and we take really good care of people. How good? Here is a glimpse: great benefits, open-door policy, upward mobility and a strong desire to see you succeed. Ready to be part of a winning team? Let’s talk.