[Remote] Senior IT Security Engineer

Note: The job is a remote job and is open to candidates in USA. SoTalent is an insurance company seeking a Senior IT Security Engineer to lead enterprise data protection, information governance, and security initiatives. The role focuses on implementing controls and solutions across cloud, SaaS, endpoint, and enterprise environments while supporting compliance, risk management, DLP, insider risk management, and cross-functional security objectives.

Responsibilities

• Lead the administration, enhancement, and ongoing maturity of enterprise data protection programs
• Develop and implement strategies that safeguard sensitive information across cloud, SaaS, and endpoint environments
• Establish security controls that support data confidentiality, integrity, and regulatory compliance
• Drive continuous improvement initiatives that strengthen the organization's overall security posture
• Design and maintain enterprise data classification and information governance frameworks
• Develop policies, standards, and procedures for the secure handling of sensitive and confidential information
• Implement and manage data labeling, classification, and protection mechanisms across enterprise systems
• Partner with business and technology teams to ensure consistent data governance practices
• Design, deploy, and optimize Data Loss Prevention (DLP) programs and controls
• Monitor and enhance DLP solutions to prevent unauthorized access, sharing, or exfiltration of sensitive data
• Analyze incidents and implement corrective actions to strengthen data protection capabilities
• Develop detection and response strategies for emerging data security risks
• Support the development and operation of insider risk monitoring and mitigation programs
• Investigate and assess potential insider threats and data misuse events
• Collaborate with compliance, legal, and HR stakeholders on appropriate response actions
• Implement controls that balance security requirements with user productivity and privacy considerations
• Ensure data protection solutions align with legal, regulatory, and organizational compliance requirements
• Support audits, compliance assessments, and regulatory reporting efforts
• Collaborate with governance and risk teams to identify compliance gaps and develop remediation plans
• Maintain documentation related to security controls, policies, and compliance activities
• Design and implement security solutions that integrate with enterprise applications, infrastructure, and cloud platforms
• Evaluate and deploy technologies that strengthen information protection capabilities
• Support encryption, access controls, and data security architectures across enterprise environments
• Collaborate with security and infrastructure teams to enhance platform security and operational resilience
• Partner with legal, compliance, privacy, risk management, and IT teams to support enterprise security objectives
• Provide subject matter expertise on data protection technologies, governance requirements, and information security best practices
• Communicate security risks, recommendations, and program updates to stakeholders and leadership
• Support enterprise security initiatives and strategic technology projects
• Identify emerging threats, technology trends, and opportunities to improve data security capabilities
• Participate in security assessments, risk analyses, and control evaluations
• Develop metrics and reporting that measure program effectiveness and operational performance
• Promote security awareness and best practices throughout the organization

Skills

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field
• Minimum 7 years of information security experience
• At least 5 years of hands-on experience supporting enterprise data protection and information governance initiatives
• Strong expertise in data classification, data governance, and information protection technologies
• Experience designing and implementing Data Loss Prevention (DLP) programs
• Knowledge of regulatory compliance frameworks and security best practices
• Strong understanding of security architecture and risk management principles
• Excellent analytical, problem-solving, and communication skills
• Authorization to work in the United States
• Data Protection
• Data Loss Prevention (DLP)
• Data Classification
• Data Governance
• Information Protection
• Insider Risk Management
• Security Architecture
• Compliance & Regulatory Controls
• Sensitivity Labels
• Records Management
• Encryption Technologies
• Security Governance
• Risk Management
• Cloud Security
• SaaS Security
• Data Security Operations
• Stakeholder Management

Benefits

• Remote work setting

Company Overview