HSBCJP00059314 Data Security Policy Engineer

Data Security Policy Engineer

Location: Kraków, Poland (hybrid - 6 days per month in the office)

Contract: B2B

About the Role

We are looking for an experienced Data Security Engineer to join a cybersecurity team focused on protecting sensitive information and improving data security controls.

In this role, you will be responsible for designing, implementing, maintaining, and optimizing Data Loss Prevention (DLP) policies and security solutions. You will work with various stakeholders to understand data protection requirements, identify security gaps, and implement effective solutions to reduce data-related risks.

Key Responsibilities

• Design, configure, implement, and optimize Data Loss Prevention (DLP) policies and security controls.

• Manage and maintain DLP solutions such as Symantec DLP, Trellix, Zscaler, or Proofpoint.

• Develop and update data security policies to address evolving business needs and security risks.

• Configure and manage data discovery and scanning tools to protect sensitive information.

• Support data protection solutions covering Data in Motion and Data at Rest.

• Provide production support, troubleshoot issues, and ensure the effective operation of DLP policies and tools.

• Collaborate with stakeholders to gather requirements, identify security gaps, and translate business needs into technical solutions.

• Participate in cybersecurity projects, including the implementation and improvement of data protection technologies.

• Support security audits, compliance activities, and risk management processes.

• Use Jira and Confluence for project tracking, documentation, and operational support.

Requirements

• Minimum 5 years of experience in Data Security Engineering, preferably with a focus on DLP technologies.

• Hands-on experience with at least one DLP solution, such as Symantec DLP, Trellix, Zscaler, or Proofpoint.

• Practical experience in creating, configuring, analyzing, and maintaining DLP policies.

• Experience with data discovery and scanning tools.

• Good understanding of Data in Motion and/or Data at Rest security.

• Knowledge of cybersecurity threats, data protection principles, and security best practices.

• Experience working in Agile environments and using Jira and Confluence.

• Ability to translate business requirements into technical solutions and implementation plans.

• Strong analytical, troubleshooting, and problem-solving skills.

• Good communication skills and experience working with technical and business stakeholders.

• Ability to work effectively in a collaborative, international environment.

Nice to Have

• Experience with Microsoft Information Protection (MIP).

• Cybersecurity certifications such as CISSP, CISM, or CISA.

• Experience working in regulated environments, particularly financial services.

• Experience supporting security audits and compliance requirements.

• IT or cybersecurity-related degree.

What We Offer

• B2B contract

• Hybrid working model - 6 days per month from the office in Kraków.

• LuxMed private medical care

• MyBenefit cafeteria platform

• Dedicated Contractor Care support throughout the cooperation.