Lead Data Security Architect

🕒 il y a 9 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

VAILEXA

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2020

🎯 Recrutement

👥 RH Tech

Recruitment • HR Tech

VAILEXA est une entreprise de solutions en talents et de recrutement qui offre des services de recrutement personnalisés et de gestion d'embauche de bout en bout pour les entreprises. VAILEXA propose l'externalisation des processus de recrutement (RPO), la recherche de dirigeants et le headhunting, des solutions de recrutement à l'échelle mondiale et du conseil RH professionnel (gestion des politiques, engagement des employés, formation au leadership). L'entreprise met l'accent sur la planification de la main-d'œuvre basée sur les données et l'analytique prédictive, avec des tableaux de bord en temps réel, la planification de scénarios et l'analyse des écarts de compétences pour aider les clients à se développer. VAILEXA sert de multiples industries (technologie & SaaS, services financiers & bancaires, gouvernement & secteur public, logistique & transport, santé & sciences de la vie, énergie, fabrication, vente au détail, semi-conducteurs, assurance) et met en évidence des indicateurs orientés client tels que plus de 300 clients satisfaits, 98% de rétention client, 88% de succès de placement et un temps de présélection rapide.

Description

• Understand objectives, scope, current-state challenges, governance expectations, and desired outcomes for the broader data security and remediation effort. • Review relevant SharePoint, OneDrive, Microsoft Purview, and Cyera context to identify where sensitive data exposure, oversharing, policy gaps, workflow constraints, or remediation backlog items are creating risk. • Connect discovery, classification, tagging, labeling, remediation, and governance activities into one integrated project approach that supports practical execution and long-term operating maturity. • Work with client teams to identify priority findings, ownership paths, decision points, remediation dependencies, and near-term actions requiring deeper technical validation. • Assess how sensitive data is currently discovered, classified, tagged, labeled, monitored, and remediated across SharePoint, OneDrive, Cyera, and Microsoft Purview. • Help define and refine classification, tagging, and labeling practices that support remediation, DLP policy alignment, access governance, and ongoing data protection objectives. • Provide architecture-level guidance on labeling strategy, DLP policy impacts, access exposure, exception handling, and control behavior across the client’s Microsoft 365 and DSPM environment. • Maintain and support client’s governance model, operational workflows, and risk reduction priorities. • Work hands-on in Cyera and Microsoft Purview to improve findings, validate root cause, confirm control behavior, and support remediation actions. • Support controlled validation activities in approved environments to confirm that remediation actions reduce exposure without creating unacceptable business disruption. • Partner with security operations, DLP, governance, compliance, and business stakeholders to ensure findings are triaged, assigned, remediated, and tracked consistently. • Define practical measures of remediation progress, including closure rate, exposure reduction, policy effectiveness, escalation clarity, and audit readiness. • Take action to integrate DSPM, Microsoft Purview, classification, labeling, DLP, access governance, and incident response workflows. • Document recommended ownership, cadence, escalation paths, and governance checkpoints so remediation can continue beyond the initial project window. • Apply solutions to business-case terms, connecting technical remediation to risk reduction, operational maturity, and governance outcomes.

🎯 Exigences

• 7+ years in security architecture, data security, or related cybersecurity consulting roles, with demonstrated ownership of client-facing engagements from scoping through delivery. • Genuinely hands-on-keyboard — able to log into Cyera and Microsoft Purview directly, investigate a finding, and drive it to remediation personally, not only direct others to do so. This is a client-stated requirement, not a nice-to-have. • Deep working knowledge of Microsoft 365 data-layer security: SharePoint Online, OneDrive for Business, Microsoft Purview (DLP, sensitivity labels, Insider Risk Management, Audit), and Entra ID access/consent fundamentals. • Direct, practical expertise in Cyera specifically — Client 's enterprise-standard DSPM platform — including how to investigate and remediate findings, not just interpret dashboards. • Demonstrated ability to remediate findings surfaced by Cyera or any DLP tooling — revoking access, adjusting policy, closing out flagged exposure — since the client's core concern is remediation capability, not just detection or reporting. • Demonstrated ability to design and lead purple-team-style validation exercises (not full red-team penetration testing) — controlled, safety-guard railed simulations in test environments. • Strong command of incident response fundamentals: MTTD/MTTC measurement, scope determination, evidence/audit readiness, and remediation tracking, including how DLP findings hand off to the SOC for incident response. • Comfort working as a peer alongside a client's existing in-house DLP engineer — augmenting and unblocking their work, not replacing or duplicating it. • Working knowledge of relevant regulatory and contractual notification obligations (e.g., state breach notification laws, SEC cyber disclosure rules) sufficient to guide discovery questions — not intended to substitute for the client's own legal/compliance counsel. • Excellent stakeholder-facing communication skills; able to translate technical findings into a business case for both technical and executive audiences. • Hands-on experience with both Cyera and Varonis is viewed favorably by the client, even though Cyera is the enterprise-standard platform — broader DSPM platform fluency is a plus. • Relevant certifications such as CISSP, SANS/GIAC (e.g., GDSA, GCTI), or Microsoft security certifications (SC-100, SC-401). • Experience assessing Copilot for M365 or other generative-AI access-exposure risk ahead of rollout. • Prior experience in a public-company or regulated-industry environment (industrial, manufacturing, or similar). • Comfort operating within a formal enterprise data governance structure spanning multiple business units — Data Governance Council, segment governance leads, RACI-based accountability model. We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication.

🏖️ Avantages

• Health insurance • 401(k) matching • Flexible work hours • Paid time off • Remote work options