GMS-Senior-SEG-DAG

Ernst & Young Advisory Services Sdn Bhd; Bengaluru; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

EY is seeking a Senior Professional to manage Secure Email Gateway (SEG) operations and Data Access Governance (DAG). You will administer Proofpoint and Microsoft Defender for Office 365, configure data security with Varonis, and drive reviews and remediation of access controls.

Join EY to strengthen security posture, support audits, and work with SOC, IAM, and infrastructure teams in a dynamic environment.

Qualifications

• 4+ years of experience in Cybersecurity, Email Security, or Data Security domains.
• Hands-on experience with Proofpoint Email Protection, Microsoft Defender for Office 365 / EOP, and Varonis Data Security Platform.
• Strong understanding of phishing, malware, email authentication protocols (SPF, DKIM, DMARC).
• Experience in data access governance, file permission management, and data classification.
• Knowledge of security operations, incident response, and SIEM integration.
• Strong troubleshooting, analytical, and stakeholder management skills.

Responsibilities

• Administer, monitor, and optimize Secure Email Gateway (SEG) solutions, primarily Proofpoint and Microsoft Defender for Office 365 / EOP.
• Manage email security policies related to anti-phishing, anti-spam, malware protection, URL defense, attachment sandboxing, and email encryption.
• Investigate and respond to email security incidents, threats, and user-reported phishing campaigns.
• Configure and maintain Varonis Data Security Platform for data access governance, permission analysis, and sensitive data monitoring.
• Conduct data access reviews, entitlement analysis, and remediation of excessive or inappropriate permissions.
• Monitor and investigate anomalous file access, insider threat indicators, and data exfiltration risks using Varonis.
• Develop reports, dashboards, and compliance evidence related to email security and data governance controls.
• Collaborate with SOC, IAM, Infrastructure, and Business teams to strengthen security posture and meet compliance requirements.
• Support security audits, risk assessments, and governance initiatives.

Skills

Cybersecurity

Email Security

Data Security

Stakeholder management

Tools

Proofpoint Email Protection

Microsoft Defender for Office 365

Varonis Data Security Platform

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

CMS-TDR – Senior (SEG,DAG - Proofpoint and Microsoft, Varonis)

Job Summary

Looking for 4+ years experienced professional to manage Secure Email Gateway (SEG) operations and Data access governance (DAG)

Key Responsibilities

• Administer, monitor, and optimize Secure Email Gateway (SEG) solutions, primarily Proofpoint and Microsoft Defender for Office 365 / Exchange Online Protection (EOP).
• Manage email security policies related to anti-phishing, anti-spam, malware protection, URL defense, attachment sandboxing, and email encryption.
• Investigate and respond to email security incidents, threats, and user-reported phishing campaigns.
• Configure and maintain Varonis Data Security Platform for data access governance, permission analysis, and sensitive data monitoring.
• Conduct data access reviews, entitlement analysis, and remediation of excessive or inappropriate permissions.
• Monitor and investigate anomalous file access, insider threat indicators, and data exfiltration risks using Varonis.
• Develop reports, dashboards, and compliance evidence related to email security and data governance controls.
• Collaborate with SOC, IAM, Infrastructure, and Business teams to strengthen security posture and meet compliance requirements.
• Support security audits, risk assessments, and governance initiatives.

Required Skills

• 4+ years of experience in Cybersecurity, Email Security, or Data Security domains.
• Hands-on experience with:
  • Proofpoint Email Protection
  • Microsoft Defender for Office 365 / Exchange Online Protection (EOP)
  • Varonis Data Security Platform
• Strong understanding of phishing, malware, email authentication protocols (SPF, DKIM, DMARC), and email threat protection.
• Experience in data access governance, file permission management, and data classification.
• Knowledge of security operations, incident response, and SIEM integration.
• Strong troubleshooting, analytical, and stakeholder management skills.

Preferred Qualifications

• Certifications such as SC-200, SC-300, MS-102, Proofpoint Certified Professional (PCP), Varonis Administrator, or equivalent.
• Experience in enterprise environments with Microsoft 365 and hybrid infrastructures.
• Familiarity with compliance frameworks such as ISO 27001, NIST, GDPR, and regulatory data protection requirements.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Provider

Description

Enabled

SAP as service provider

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor

LinkedIn