EY - Cybersecurity - Data Protection and Information Protection - Manager
EY
EY
Join EY's Cybersecurity practice as a Manager, playing a vital role in delivering advanced Data Protection, Information Governance, and Insider Risk Management solutions. This position requires significant expertise in enterprise Data Loss Prevention and Information Protection platforms like Microsoft Purview or Forcepoint DLP, with a focus on data classification and sensitivity labeling. You'll be instrumental in implementing, administering, and optimizing data protection controls across various environments, ensuring sensitive information remains secure. Collaborate closely with business, compliance, legal, and security teams to drive data governance, regulatory compliance, and robust information protection strategies.
This is an exceptional opportunity to leverage your 12+ years of experience in Data Protection, DLP, Information Protection, Compliance, Data Governance, or Cybersecurity Consulting. We are looking for a candidate with deep technical proficiency in data classification, sensitivity labeling, DLP policy implementation, and enterprise data protection technologies.
As a Cybersecurity Manager, you will be responsible for deploying, configuring, and administering enterprise Data Loss Prevention solutions. This includes designing and implementing DLP policies across email, collaboration tools, cloud services, endpoints, and productivity suites, particularly within Microsoft 365. You will configure detection rules for sensitive data, monitor DLP alerts, and investigate data leakage incidents to support response activities. Tuning DLP policies for optimal accuracy and generating comprehensive reports on operations, risks, and compliance will be key aspects of this role.
You will also lead the implementation and administration of enterprise sensitivity labels, classification policies, and information protection controls using Microsoft Purview or similar technologies. Developing enterprise data classification frameworks, configuring labeling strategies, and implementing data protection measures like encryption and access restrictions are integral. Collaboration with business stakeholders to identify and classify sensitive data, alongside performing classification reviews to enhance data governance, will be crucial for success. Furthermore, you will implement, administer, and support enterprise data encryption solutions, manage encryption policies, and oversee the cryptographic key lifecycle, ensuring the continuous protection of business-critical data.
To excel in this role, you should possess a B.Tech, M.Tech, or equivalent degree in Cybersecurity, Computer Science, Information Security, or a related field, complemented by over 12 years of relevant cybersecurity experience. A proven track record with enterprise Data Loss Prevention and Information Protection platforms such as Microsoft Purview, Forcepoint DLP, IBM Guardium Data Encryption, or Thales CipherTrust is essential. You should have hands-on experience implementing enterprise data protection and compliance controls, with a strong understanding of security and information protection capabilities within Microsoft 365 or comparable environments.
Key qualifications include a solid grasp of data classification, data governance, and information lifecycle management principles, along with experience supporting compliance and audit requirements. Excellent verbal and written communication skills are vital for effective stakeholder management and client engagement. While not mandatory, experience with scripting and automation using PowerShell, Python, SQL, APIs, or Microsoft Graph will be considered an advantage. We are seeking passionate individuals with strong analytical skills and a commitment to delivering high-quality cybersecurity services.
EY Global Delivery Services ( EY GDS)
Information Technology & Services