Senior Data Risk and protection Engineer

Overview

Senior Data Risk and Protection Engineer in the Data Protection team at Bristol Myers Squibb's Hyderabad office, supporting the data security and data loss prevention program and reporting to the Senior Manager of Data Protection.

What you'll do

• Lead the implementation of insider risk detection tools, ensuring seamless integration with existing security infrastructure and business applications.
• Support deployment of DLP monitoring capabilities to new environments, potentially using separate DLP solutions (M&A's).
• Configure and fine-tune systems to optimize performance and detection capabilities, reducing false positives while maintaining effective threat detection.
• Collaborate with stakeholders to develop comprehensive insider threat policies, defining acceptable use, access controls, and monitoring protocols.
• Regularly review and update policies based on emerging threats, technological advancements, and regulatory changes.
• Maintain comprehensive documentation of all system configurations, policy changes, and incident response actions to ensure accountability and compliance.
• Develop regular reports and dashboards to communicate insider risk metrics, trends, and recommendations to senior management and relevant stakeholders.
• Stay updated on the latest trends in insider threat detection and mitigation, including emerging technologies and threat vectors.
• Evaluate and recommend new tools, techniques, and best practices to enhance the organization's insider risk management capabilities.
• Lead the integration of SIEM and SOAR automation within the insider risk and DLP program, ensuring these capabilities accelerate detection, investigation, and response workflows.
• Champion the exploration and adoption of emerging AI technologies to proactively identify anomalous behaviors, predict insider threat patterns, and continuously improve security posture through automated remediation and adaptive risk controls.
• Coordinate with stakeholders in the US and globally, and work closely with cross-functional teams including IT, security, and compliance to integrate solutions into the existing infrastructure.

What you'll need

• 6-8 years of experience in data security and DLP.
• Strong background in cyber security, risk management, and compliance.
• Strong technical background, attention to detail, and a collaborative approach to problem-solving.
• Familiarity with industry regulations and standards such as GDPR, CCPA, and HIPAA.
• Experience in the successful implementation and integration of insider risk management tools and technologies.

Details

• Location: Hyderabad office, Data Protection team.
• Work model: site-essential, site-by-design, field-based or remote-by-design, as assigned based on core responsibilities (see https://careers.bms.com/ways-of-working).