Job Summary:
Mercury Systems is a technology company focused on making the world a safer, more secure place through advanced processing power for aerospace and defense missions. They are seeking a Data Protection Engineer III to secure and monitor data across the business and third parties, ensuring compliance with security and governance principles while collaborating with various teams to manage data protection processes.
Responsibilities:
• Serve on a distributed security and technology team responsible for establishing and maintaining data protection technical controls.
• Align data protection policies and procedures with the corporate governance structure.
• Develop, refine, and produce clear metrics and insights on data protection, risk trends, and control effectiveness
• Work closely with security leadership, teammates and stakeholders to evaluate and implement data protection controls that align with organizational risk posture and compliance requirements.
• Support and maintain a wide range of data protection technologies, including but not limited to DLP, CASB, behavioral analytics, insider threat, data classification, data governance and encryption.
• Secure and monitor data on-premises, in cloud infrastructure and within applications required to support a dispersed remote workforce.
• Manage and test business rules protecting data, as well as the use and handling of data assets.
• Conduct data discovery to locate data at risk, as well as validate existing data storage has not been altered.
• Document data protection policies and exceptions, and periodically review with business units.
• Make recommendations for improvements to ensure least privilege to data and rigorous security practices, without negatively impacting end-user experience or leading to employees attempting to circumvent controls.
• Execute tactical requests supporting the strategic vision for rigorous and scalable data protection controls.
• Maintain understanding of business processes to aid in managing enterprise data protection.
• Frequently interact with business units to understand their plans, risk posture and tolerance, and how to share responsibility and support their vision and business obligations securely.
• Implement data protection projects from inception to completion on time and within budget.
• Openly support the organization, the management team and executive leadership team, even during times of adversity.
• Analyze systems and data sources for accidental, malicious and unauthorized activities.
• Develop relationships with engineering, IT, incident response, SOC and software engineering team members.
• Openly support the organization, management and executive leadership, even during times of adversity.
• Perform other duties as assigned.
Qualifications:
Required:
• Bachelor's degree in a related field- (Information Security/ IT)
• Typically requires 4 years’ experience in security systems administration, to include 2+ years’ technical hands-on data protection practitioner experience.
• Experience with administering directory services, databases, role-based access, DLP, data classification and governance solutions.
• Experience with Information Protection and develop and enhance insider threat and information protection policies.
• Experience with regulatory requirements and laws, such as Sarbanes-Oxley Act (SOX), GDPR & CMMC.
• Experience in one or more of the following is required: ISO 2700x, ITIL, NIST Cybersecurity Framework (CSF).
• This position requires you to have or obtain a government security clearance. Security clearances may only be granted to U.S. citizens.
Preferred:
• Active U.S. Secret Clearance.
• Some basic experience with one or more scripting languages (e.g., Python, PowerShell and Bash).
Company:
Mercury Systems is a leading commercial provider of secure sensor and safety-critical processing subsystems. Founded in 1981, the company is headquartered in Andover, USA, with a team of 1001-5000 employees. The company is currently Late Stage.