Information Security - Data Protection & Loss Prevention Engineer

Starr Insurance Companies is a leading insurance and investment organization, providing commercial property and casualty insurance, including travel and accident coverage, to almost every imaginable business and industry in virtually every part of the world.

Cornelius Vander Starr established his first insurance company in Shanghai, China in 1919. Today, we are one of the world's fastest growing insurance organizations, capable of writing in 128 countries on 6 continents.

Information Security - Data Protection & Loss Prevention Engineer

Starr's Information Security Team is seeking a highly skilled and experienced Data Protection/Data Loss Prevention (DLP) Subject Matter Expert (SME) to join our Cyber Security team. The ideal candidate will have a deep understanding of data protection strategies, DLP technologies, and regulatory compliance requirements. The SME will play a critical role in safeguarding our company's sensitive information against unauthorized access, disclosure, alteration, and destruction. Experience with Purview DLP and Varonis systems is highly preferred.

Specific Skills

• Design, implement, and manage DLP processes and procedures to protect sensitive data across the organization.

• Conduct data discovery and classification to identify and categorize data based on sensitivity and business importance.

• Configure and fine-tune Microsoft Purview DLP and Varonis Deprivilege systems to ensure optimal performance and compliance with data protection laws and regulations.

• Monitor data movement and user activities to detect and respond to potential data breaches or policy violations.

• Collaborate with IT, legal, and business units to ensure DLP strategies align with organizational objectives and regulatory requirements.

• Provide expert advice on data security best practices, emerging threats, and preventive measures.

• Develop and deliver training programs to educate employees on data protection policies and the importance of data security.

• Lead incident response efforts for data-related security breaches, including investigation, mitigation, and post-incident analysis.

Related and Desired Skills and Work experience:

• Bachelor's degree in Computer Science, Information Security, or a related field. Advanced degrees are a plus.

• Minimum of 5 years of experience in data security, with a focus on DLP strategies and technologies.

• Demonstrated expertise in Forcepoint DLP, Purview DLP, and Varonis systems.

• Strong understanding of data protection laws and regulations (e.g., GDPR, CCPA).

• Familiarity with various data storage environments (cloud, on-premises, hybrid) and encryption methodologies.

• Excellent analytical and problem-solving skills, with the ability to think strategically about data security challenges.

• Strong communication and interpersonal skills, with the ability to work effectively across teams and with senior management.

• Relevant certifications (e.g., CISSP, CISM, CIPP) are highly desirable.

#LI-EP1

Starr is an equal opportunity employer, which means we'll consider all suitably qualified applicants regardless of gender identity or expression, ethnic origin, nationality, religion or beliefs, age, sexual orientation, disability status or any other protected characteristic. We recruit and develop our people based on merit and we're committed to creating an inclusive environment for all employees. We offer first class training and development opportunities to all employees. Our aim is to grow our own talent and bring out the best in people.