Senior IT Security Engineer

Job not on LinkedIn

🔥 9 minutes ago

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Hanover

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1996

🎯 Recruiter

💼 Consulting

Recruitment • Consulting

Hanover is an executive search and talent consultancy focused on serving firms across financial services. Through executive search, leadership development, coaching, board services, outplacement and strategic consulting, Hanover helps clients identify, place and develop senior talent and design talent strategies. The firm positions itself as a growth partner to financial services organisations, combining market intelligence, sector expertise and people-centred delivery. It operates offices in London, New York, Chicago and Los Angeles and works across sectors such as asset management, banking, insurance, fintech, private equity and wealth management.

📋 Description

• Lead the ongoing administration, enhancement, and growth of the enterprise Data Protection Program • Develop and execute data protection roadmaps aligned with business, regulatory, and security objectives • Identify opportunities to improve data protection maturity and reduce organizational risk • Establish metrics and reporting demonstrating program effectiveness • Partner with leadership to define long-term data governance and protection strategies • Design and maintain enterprise data classification frameworks • Develop and govern data handling standards and protection requirements • Implement and manage sensitivity labeling, encryption, and information protection controls • Establish classification taxonomies and data ownership models with Data Governance teams • Develop automated classification and data discovery across structured and unstructured repositories • Design, implement, and manage enterprise DLP strategies and policies • Analyze DLP incidents and adjust policies to improve effectiveness while minimizing business disruption • Establish data loss investigation and response processes • Implement and maintain insider risk monitoring capabilities and detection strategies • Support internal investigations involving sensitive data and policy violations with HR, Legal, and Compliance • Support legal hold, eDiscovery, and regulatory response processes • Develop data retention and disposition strategies and manage records management controls • Establish defensible preservation and collection processes • Support security, privacy, and regulatory audits • Map compliance requirements to technical controls and assist with risk assessments and remediation planning • Design and maintain enterprise data protection architectures • Integrate data security tools with SIEM, case management, and operational platforms • Onboard cloud, SaaS, endpoint, and on-premises data sources • Develop automation using scripting and APIs • Manage tool upgrades, enhancements, health monitoring, and operational support

🎯 Requirements

• 7+ years of information security experience • 5+ years of hands-on experience supporting enterprise data protection initiatives • Experience administering one or more enterprise data protection, governance, or compliance platforms • Experience implementing DLP, information protection, data classification, and compliance solutions • Experience working with Legal, Compliance, Privacy, and Audit functions • Experience leading enterprise-scale security initiatives and projects • Authorization to work in the United States without current or future sponsorship (U.S. citizen or lawful permanent resident) • Strong experience in several of the following areas: Data Protection Programs, Data Governance, Data Classification, Information Protection, Sensitivity Labels, Encryption Technologies, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, Records Management, Data Lifecycle Management, eDiscovery, Data Security Posture Management (DSPM), Cloud Security, Identity and Access Management (IAM), Role-Based Access Control (RBAC), Microsoft 365 Security, Endpoint Security, Enterprise Security Architecture, Security Monitoring and SIEM Integration, Security Automation and Scripting • Knowledge of compliance frameworks including NIST, ISO 27001, CIS, PCI-DSS, HIPAA, GDPR, and SOX

🏖️ Benefits

• Full-time, exempt position