Lead AI and Data Security Engineer

Overview

As the bank continues to grow, we are seeking a Senior Information Security Engineer – Data Security to lead and mature the bank’s data security capabilities. This role is hands‑on and delivery‑focused, responsible for protecting sensitive data across enterprise, cloud, and application environments through strong technical controls, automation, and continuous validation.

This position will play a key role in major data security initiatives, including enterprise data masking and handling programs, the build‑out of a Data Security Posture Management (DSPM) program, and the expansion of AI security and data governance controls. The role partners closely with application, cloud, infrastructure, and security operations teams to reduce data risk and meet regulatory and audit expectations

Responsibilities

• Data Security Engineering
  • Lead and execute major data security projects, including enterprise data masking, data handling, data loss prevention, data classification and data sanitization initiatives across production and non‑production environments.
  • Design, build, and operate a DSPM program to continuously discover, classify, and monitor sensitive data across on‑premise and cloud environments.
  • Implement controls to reduce data exposure, unauthorized access, and data leakage risks.
  • Integrate Microsoft Purview to ensure secure usage of AI-powered tools and sensitive data governance.
  • Tune and optimize detection rules to improve visibility and reduce false positives.
• AI Security & Data Governance
  • Implement and operate AI security controls to ensure sensitive data is protected when used by AI‑enabled and automation tools.
  • Partner with governance and technology teams to enforce secure use of AI systems involving regulated or sensitive data.
  • Leverage Microsoft Purview for data governance, data loss prevention, and analytics across structured and unstructured data.
• Security Monitoring & Incident Response
  • Monitor security events and alerts related to data protection from SIEM, DLP, DSPM, and Purview platforms.
  • Investigate data‑related security incidents and support response, containment, and remediation efforts.
  • Collaborate with SOC, IT, and cloud teams to ensure effective resolution and documentation
• Compliance, Audit & Reporting
  • Ensure data protection controls align with regulatory and industry requirements (e.g., GLBA, CCPA, ISO 27001).
  • Produce reporting and metrics on data classification, access, violations, and risk posture.
  • Support internal and external audits by providing evidence and demonstrating control effectiveness.
• Engineering & Automation
  • Support secure cloud deployments (such as AWS, Azure, etc) and implement controls for data access and movement.
  • Automate security assessments, reporting, and policy enforcement across tools.
  • Maintain engineering documentation and contribute to security architecture reviews.
• May perform other duties as assigned

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; advanced degree preferred.
• 8+ years of hands‑on information security engineering experience.
• 3+ years of experience in data security, data protection, or similar roles.
• Hands‑on experience with data masking and handling tools such as Delphix or other.
• Experience building or operating DSPM, data discovery, or data governance programs. Hands-on experience with Purview, Cyera or equivalent tools.
• Proficiency with DLP and data governance tools such as Microsoft Purview, Digital Guardian, Forcepoint, Varonis, or similar.
• Experience integrating security tooling with SIEM platforms (e.g., Splunk, LogRhythm, InsightIDR, Sumo Logic).
• Familiarity with AI security risks, data usage controls, and governance in AI‑enabled environments.
• Strong automation and scripting capabilities.
• Experience working in regulated environments, preferably financial services.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CCSP, GIAC, CEH, or CISA.
• Experience securing data in cloud environments (AWS, Azure, GCP).
• Strong analytical, troubleshooting, and communication skills

Applicants must have legal authorization to work in the United States. We do not offer visa sponsorship at this time.