Information Security Specialist II

• Own and manage the enterprise Data Loss Prevention (DLP) program end to end, including policy design and changes, exception handling, new functionality and rollout
• Partner with Legal and data owners to define and enforce protection for high-risk company assets
• Maintain a quarterly-reviewed inventory of protected assets with Legal
• Perform Azure and AWS cloud security assessments and remediate identified findings
• Support Azure cloud security engineering, including Microsoft Graph API automation, secure configuration, identity and workload hardening
• Lead High and Critical security alerts in the non-US time zone through documented closure within SLA
• Improve L2 support effectiveness through SOPs, expert guidance, escalation support and automation playbooks
• Act as integration owner and backup contact for the third-party managed detection and response service
• Maintain Information Security operations compliance with ISO 27001, data privacy regulations and other requirements
• Support internal audit, FedRAMP and Legal requests
• Support Information Security special projects and provide backup across key security and GIT domains
• Prepare reports, technical presentations and KPI/metrics reporting for management
• Review security logs, investigate threats and vulnerabilities, and respond to security incidents
• Tune DLP policies and process business exception requests
• Review firewall, intrusion detection and encryption tool configurations
• Assess and test networks and cloud infrastructure for vulnerabilities and recommend remediation
• Review and audit Azure and AWS Security Groups
• Collaborate with security experts and stakeholders to improve overall security posture

• Eight (8) or more years of relevant information security experience, including hands-on ownership of an enterprise security program
• Bachelor’s degree in Information Security, Computer Science or a related field; or equivalent work experience required
• Demonstrated experience owning an enterprise DLP program, including policy authoring, tuning, exception management and sensitivity labeling of Confidential and Restricted data
• Microsoft Purview DLP and Information Protection preferred
• Experience designing, assessing and remediating Azure cloud security controls, including Defender for Cloud, Entra ID, Azure Policy, network and workload security
• AWS exposure an advantage
• Hands-on L2/L3 incident response experience, including ownership of High and Critical cases through closure alongside an MSSP or 24x7 SOC partner
• Experience authoring SOPs, runbooks and automation/SOAR playbooks
• Incident report writing skills
• Working knowledge of Microsoft Graph API and scripting automation using PowerShell and Python
• Knowledge of information security and data privacy laws and frameworks, including ISO 27001 and GDPR
• Experience supporting internal and external audits
• Professional certification preferred: CISSP, CCSP, AZ-500, SC-400, GCIH or equivalent
• Willingness to cover non-US-hours escalation for global incidents
• Strong written and verbal communication
• Ability to work with Legal, business stakeholders and global IT teams
• Availability to cover High and Critical escalations in the non-US time zone

• Competitive insurance plans for you and your immediate family
• Annual Health checkup
• Marriage Leave
• Paternity Leave
• Employee Assistance Programme
• Extensive learning and development opportunities