Senior IT Security Engineer

🔥 2 minutes ago

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

The Hanover Insurance Group

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1852

🛡️ Insurance

🤝 B2B

👥 B2C

💰 $500M Post-IPO Debt - The Hanover Insurance Group on 2025-08

Insurance • B2B • B2C

The Hanover Insurance Group is a U. S. -based insurance company that provides personal and commercial insurance products and services. Hanover offers individual lines such as home, auto, motorcycle, umbrella, condominium, renters, and specialty coverages (collector cars, watercraft, valuable items), as well as comprehensive business products including business owner’s policies, commercial auto, workers' compensation, management liability, cyber, professional liability, property, surety, and industry-specific coverages for construction, healthcare, life sciences, retail, and more. The company supports customers and agents with claims services, policy management tools, educational resources, risk solutions, and an agent/broker distribution network. Hanover emphasizes customer service, preparedness resources, corporate responsibility, and agent support.

📋 Description

• Lead the ongoing administration, enhancement, and growth of the enterprise Data Protection Program • Develop and execute data protection roadmaps aligned with business, regulatory, and security objectives • Identify opportunities to improve data protection maturity and reduce organizational risk • Establish metrics and reporting demonstrating program effectiveness • Partner with leadership to define long-term data governance and protection strategies • Design and maintain enterprise data classification frameworks • Develop and govern data handling standards and protection requirements • Implement and manage sensitivity labeling, encryption, and information protection controls • Establish classification taxonomies, data ownership models, automated classification, and data discovery capabilities • Design, implement, and manage enterprise DLP strategies and policies • Analyze DLP incidents and manage data loss investigations and response activities • Implement insider risk monitoring and detection strategies • Support internal investigations involving sensitive data and policy violations • Support legal hold, eDiscovery, regulatory response, data retention, and records management processes • Support security, privacy, and regulatory audits, risk assessments, and remediation planning • Design and maintain enterprise data protection architectures • Integrate data security tools with SIEM, case management, and operational platforms • Onboard cloud, SaaS, endpoint, and on-premises data sources • Develop automation using scripting and APIs • Manage tool upgrades, enhancements, health monitoring, and operational support • Partner with Security, Legal, Compliance, Privacy, IT, Data Governance, HR, and business stakeholders

🎯 Requirements

• 7+ years of information security experience • 5+ years of hands-on experience supporting enterprise data protection initiatives • Experience administering one or more enterprise data protection, governance, or compliance platforms • Experience implementing DLP, information protection, data classification, and compliance solutions • Experience working with Legal, Compliance, Privacy, and Audit functions • Experience leading enterprise-scale security initiatives and projects • Authorization to work in the United States without current or future sponsorship (U.S. citizen or lawful permanent resident) • Strong experience in several areas including data protection programs, data governance, data classification, information protection, sensitivity labels, encryption technologies, DLP, insider risk management, communication compliance, records management, data lifecycle management, eDiscovery, DSPM, cloud security, IAM, RBAC, Microsoft 365 Security, endpoint security, enterprise security architecture, security monitoring and SIEM integration, security automation and scripting • Knowledge of compliance frameworks including NIST, ISO 27001, CIS, PCI-DSS, HIPAA, GDPR, and SOX

🏖️ Benefits

• Full-time, exempt position • Remote work capacity available