Senior Specialist, IT Risk and Compliance

Summary

The Senior Specialist, IT Risk and Compliance requires extensive experience with Data Loss Prevention (DLP) and similar technologies in order to be capable of managing Data protection and monitoring activities while coordinating IT compliance projects. The incumbent will interact with internal and external stakeholders and provide support and guidance around DLP and security tools.

Detailed Description

Performs tasks such as, but not limited to, the following:

● Implementation of DLP technology across a large enterprise.

● Administration of the DLP tools to include configuration of policies, upgrading, patching etc.

● Monitor and respond to alerts generated from the DLP systems and other technologies.

● Evaluate false positives and false negatives, fine tune the data protection policies to correct the errors

● Perform regular fine-tuning of DLP console

● Create new rules / fingerprinting as required by Celestica

● Assess the applicable regulations and risk and privacy requirements (both external and internal) and accordingly design DLP rules for the same

● Establish end user awareness through response mails, case studies etc.

● Understand and follow the incident response process through event escalations.

● Collaborate with business groups to help them identify, classify, and secure data

● Implementation of proactive measures to enhance accuracy and effectiveness of DLP tools

● Develops and supports project management processes, guidelines and products. Provides project planning support for project gating. Organizes and supports project management training.

● Provides expertise to the business and IT teams on IT controls improvements and implementation, assisting with the IT controls updates and re-design

● Participates in the audit process - enforces compliance measures to ensure audit readiness and assists internal and external auditors with the audits

● Assists with policy and process changes to ensure the documents are up to date

Knowledge/Skills/Competencies

● Sound knowledge of DLP versions, patches and other initiatives for system updating/up gradation.

● Good understanding of organizational network architectures including cloud.

● Experience in maintaining various metrices and SLAs

● Good to have skills like DRM, Database Management etc.

● Ability to work in a team environment.

● Strong customer management skills

● Ability to clearly articulate the role that IT can play in enhancing the customer's activities

● Create executive dashboards / presentations which capture the overall state of the data loss prevention function leveraging KPIs tracked

Physical Demands

Duties of this position are performed in a normal office environment.

Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Typical Experience

Between 7 to 10 years of experience in DLP and similar security tools and technologies.

Typical Education

• Bachelor's Degree in related field.
• DLP product certifications (e.g., Forcepoint DLP Engineer).
• CISSP, or equivalent certification desired

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.