New York, New York26 days ago
5+ years of experience in information security, with direct focus on data protection, insider risk, or identity governance; Hands-on experience with one or more DLP and data classification platforms (e.g., Microsoft Purview, Symantec, Forcepoint, Netskope, etc.); Experience managing identity and access governance solutions (e.g., Microsoft Entra ID Governance, SailPoint, Saviynt, Okta IGA); Strong understanding of data classification schemes, sensitive data types, and data handling controls; Experience investigating security alerts and incidents involving user behavior and data misuse; Familiarity with endpoint, cloud, and SaaS security architectures; Strong documentation, communication, and cross-functional collaboration skills; and. Experience with Microsoft security ecosystem (Purview, Defender for Endpoint, Defender for Cloud Apps, Entra ID, Sentinel); Experience with User and Entity Behavior Analytics (UEBA) or insider risk platforms; Knowledge of privacy-by-design principles and employee monitoring considerations; Scripting or automation experience (PowerShell, Python, KQL, etc.); Security certifications such as CISSP, CISM, CCSP, GIAC, or vendor-specific certifications; Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related technical field.