Data Risk Engineer
Core
Implement and tune Data Loss Prevention (DLP) capabilities, triage alerts, and manage data mishandling cases across SaaS, email, endpoints, and collaboration tools.
Role type
Individual contributor Data Risk Engineer
Builds
DLP rulesets, alert triage workflows, and data classification controls
Domain
Financial services / Data protection and privacy
Required skills
DLP implementation and tuning, alert triage and severity assessment, data classification, PII handling, SIEM and log analysis, regulatory framework knowledge (NIST CSF, ISO 27001, SOC 2, GDPR, APPI), cross-functional collaboration
Preferred skills
Fintech or trading platform experience, scripting/automation (Python, SQL), cloud platform experience, audit support experience, Insider Risk investigation exposure, AI data risk familiarity
Technologies
ELK/Elastic, Splunk, Google Workspace, Slack
Responsibilities
Implement and tune DLP across SaaS, email, endpoints, and collaboration tools; Triage and investigate DLP alerts to determine validity and next steps; Handle false positives and refine rulesets; Respond to user data mishandling with education and correction; Engage employees sharing sensitive data inappropriately; Partner with HR, Legal, Compliance, Engineering, and IT on data incidents; Support audits and regulatory requirements; Assess risks from unauthorized AI tooling.
Seniority
Mid-level, hands-on IC
