Advance your career with EY in our dynamic Cyber Security team, specializing in Data Protection and Privacy Platforms Engineering. This role focuses on designing, implementing, and managing robust enterprise-scale technologies to safeguard sensitive data across various digital landscapes, including endpoints, networks, cloud, applications, and AI-driven platforms. You will collaborate closely with clients to engineer solutions for Data Loss Prevention (DLP), data discovery and classification, and privacy management, ensuring secure and compliant data utilization in modern environments.

Lead the engineering and implementation of data protection and privacy platforms, encompassing DLP, data discovery, classification, and privacy tooling. Administer DLP solutions across endpoint, email, network, cloud, and SaaS environments. Design and operationalize data discovery and classification programs for sensitive data visibility. Engineer privacy platforms for consent management, data subject rights (DSR/DSAR), and privacy workflows. Implement and support Privacy Enhancing Technologies (PETs) such as tokenization and anonymization. Integrate data protection platforms with cloud, data, and AI ecosystems. Manage Microsoft Purview Information Protection for data classification and policy enforcement. Configure controls aligned with global privacy regulations and data governance standards. Optimize platform configurations for effectiveness and reduced false positives. Support incident response for data leakage and privacy breaches. Collaborate with cross-functional teams including security architecture, cloud, legal, and compliance. Develop operational runbooks and standard operating procedures. Mentor junior engineers and engage with client stakeholders to deliver technical solutions.

A minimum of 10-14 years of experience in Information Security, with a strong emphasis on Data Protection, Privacy Engineering, or Platform Implementation, is essential. Candidates must possess hands-on experience with DLP solutions (endpoint, email, cloud, network) and data discovery/classification technologies for structured and unstructured data. Practical experience with privacy platforms supporting DSAR/DSR, consent management, and privacy workflows is required. A solid understanding of data protection controls like encryption, key management, tokenization, and masking, alongside experience in hybrid and cloud environments, is crucial. Relevant certifications such as CIPP/E, CIPM, CISSP, or equivalent are advantageous.