EY - Cybersecurity - Data Protection and Information Protection - Manager

EY; Ernakulam; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

EY in India is seeking a Cybersecurity Manager to lead Data Protection, Information Governance, and Insider Risk Management initiatives across client environments. The role demands 12+ years of experience with DLP, labeling, encryption, and governance, plus hands-on expertise with Microsoft Purview and Forcepoint DLP.

You will design policies, implement protection controls across endpoints, cloud, and collaboration tools, and collaborate with legal, compliance, and risk teams to support

Qualifications

• 12+ years of relevant cybersecurity experience.
• Hands-on with data protection & DLP platforms (Microsoft Purview, Forcepoint DLP).
• Experience in data classification, labeling, encryption, and rights management.
• Knowledge of data governance, compliance, and risk management.
• Strong communication and stakeholder management skills.
• Experience enabling regulatory compliance programs and audits.
• Experience with scripting, automation, and platform integration is a plus.

Responsibilities

• Deploy and optimize DLP solutions across email, cloud, and endpoints.
• Design and enforce data classification policies and labeling strategies.
• Manage encryption policies for structured and unstructured data.
• Coordinate with legal, compliance, privacy, and risk teams on data protection initiatives.
• Generate reports on risk, compliance, and data protection activities.

Skills

DLP

Governance

Purview

Encryption

PowerShell

Python

Compliance

Stakeholder management

Education

B.Tech / M.Tech in Cybersecurity / CS

Tools

Microsoft Purview

Forcepoint DLP

Microsoft 365

PowerShell

Python

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY – Cybersecurity Manager, Data Protection & Information Protection

Overview

As a Manager in EY’s Cybersecurity practice, you will play a key role in delivering Data Protection, Information Governance, and Insider Risk Management services across multiple client environments. We are seeking cybersecurity professionals with expertise in enterprise Data Loss Prevention and Information Protection platforms, including Microsoft Purview, Forcepoint DLP, or equivalent technologies, covering data classification and sensitivity labelling capabilities.

The role involves implementing, administering, and optimizing enterprise data protection controls to safeguard sensitive information across endpoints, email, collaboration platforms, cloud services, and business applications. The successful candidate will work closely with business, compliance, legal, and security teams to support data governance, regulatory compliance, and information protection initiatives.

The Opportunity

We are seeking cybersecurity professionals with 12+ years of experience in Data Protection, Data Loss Prevention, Information Protection, Compliance, Data Governance, or Cybersecurity Consulting.

The ideal candidate will possess strong technical expertise in data classification, sensitivity labelling, DLP policy implementation, information governance, regulatory compliance, and enterprise data protection and security technologies.

Key Responsibilities

Data Loss Prevention

• Deploy, configure, and administer enterprise Data Loss Prevention solutions such as Microsoft Purview DLP, Forcepoint DLP, or equivalent technologies.
• Design and implement DLP policies across enterprise email, collaboration, cloud, endpoint, and productivity services, including Microsoft 365 services such as Exchange Online, SharePoint Online, OneDrive, Teams, and endpoints.
• Configure detection rules for sensitive information types, keywords, document fingerprints, and custom classifiers.
• Monitor DLP alerts, incidents, and policy violations.
• Investigate data leakage events and support incident response activities.
• Implement risk-based controls to prevent unauthorized sharing, transfer, or exposure of sensitive information.
• Tune DLP policies to improve detection accuracy and reduce false positives.
• Support regulatory compliance requirements through appropriate policy implementation and reporting.
• Generate operational, risk, and compliance reports for stakeholders.

Data Classification & Labelling

• Implement and administer enterprise sensitivity labels, classification policies, and information protection controls using Microsoft Purview or equivalent technologies.
• Design and maintain enterprise data classification frameworks.
• Configure automatic, recommended, and manual labelling strategies.
• Implement data protection capabilities, including encryption, content marking, access restrictions, and usage controls.
• Integrate information protection controls across enterprise collaboration, productivity, cloud, and information management workloads.
• Support secure data sharing and collaboration initiatives.
• Perform classification reviews and improve data governance controls.
• Work with business stakeholders to identify and classify sensitive business information.

Data Encryption Management

• Implement, administer, and support enterprise data encryption solutions such as IBM Guardium Data Encryption, Thales CipherTrust, or equivalent technologies across enterprise environments.
• Configure and manage encryption policies for structured and unstructured data.
• Support encryption deployments across on-premises, cloud, and hybrid environments.
• Monitor encryption controls and ensure continuous protection of business-critical data.
• Troubleshoot encryption-related issues and support operational activities.
• Manage cryptographic key lifecycle processes, including generation, distribution, storage, rotation, archival, and destruction.
• Administer enterprise key management systems and encryption key repositories.
• Support encryption key governance and access controls.
• Implement separation-of-duty principles for key management operations.

Cryptographic Security & Data Protection

• Implement encryption controls for data at rest, data in transit, and data in use, where applicable.
• Support database, application, file-level, and storage-level encryption initiatives.
• Implement and maintain TLS/SSL security controls and certificate management processes.
• Support Public Key Infrastructure integration and management activities.
• Evaluate cryptographic configurations and identify security weaknesses.
• Support secure data-sharing and information protection initiatives.
• Assist in the implementation of tokenization, masking, and encryption-based data protection controls.

Information Protection Governance

• Develop and maintain data classification standards and governance procedures.
• Conduct data discovery and information protection assessments.
• Support the implementation of information handling requirements aligned with organizational policies.
• Collaborate with legal, compliance, privacy, and risk teams on data protection initiatives.
• Support audit activities and compliance assessments.
• Assist in defining information protection roadmaps and maturity improvement plans.
• Provide recommendations for strengthening enterprise data protection controls.

Skills And Attributes For Success

• Strong understanding of Data Loss Prevention and Information Protection concepts.
• Experience with data classification, sensitivity labelling, encryption, and rights management.
• Understanding of data governance and information lifecycle management principles.
• Knowledge of enterprise data protection, security, and compliance platforms, including Microsoft 365 and other relevant technology ecosystems.
• Familiarity with privacy and regulatory requirements.
• Strong analytical and troubleshooting skills.
• Excellent communication and stakeholder management capabilities.
• Ability to manage multiple client engagements and priorities simultaneously.
• Strong customer-focused and consulting-oriented approach.

To Qualify for the Role, You Must Have

• B. Tech, M. Tech, or an equivalent degree in Cybersecurity, Computer Science, Information Security, or related disciplines.
• 12+ years of relevant cybersecurity experience.
• Hands-on experience with one or more of the following technologies or equivalent enterprise platforms:
• Microsoft Purview Data Loss Prevention
• Microsoft Purview Information Protection
• Microsoft Purview Sensitivity Labelling
• Forcepoint Data Loss Prevention
• Experience implementing enterprise data protection and compliance controls.
• Knowledge of enterprise security, information protection, and compliance capabilities across Microsoft 365 or comparable technology environments.
• Understanding of data classification, data governance, and information lifecycle management.
• Experience supporting compliance and audit requirements.
• Strong verbal and written communication skills.
• Experience with scripting, automation, and platform integration using PowerShell, Python, SQL, APIs, or Microsoft Graph is an advantage.

What We Look For

• Professionals who are passionate about data protection, information governance, and regulatory compliance. Successful candidates will possess strong technical expertise, excellent analytical skills, and the ability to translate business requirements into effective information protection controls. A strong sense of ownership, customer focus, and commitment to delivering high-quality cybersecurity services will be key to success in this role.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.