Data security engineer in cybersecurity

PwC Polska; Warszawa; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Гибридная работа

Гибкий старт дня

Медицинское страхование

Job summary

PwC Polska приглашает специалиста по кибербезопасности в CEE Cybersecurity Center в Варшаве. Ваша работа будет заключаться в проектировании, внедрении и эксплуатации средств защиты данных в Microsoft 365, облачных платформах и на локальных системах.

Вы будете работать напрямую с инструментами Purview, DLP и DSPM, помогая компаниям повысить устойчивость к кибератакам. Требуется опыт трансформации требований в технические политики и контроль, владение английским языком; знание немецкого будет

Qualifications

• Высокий уровень владения английским языком.
• Знание немецкого языка будет плюсом.
• Опыт проектирования, внедрения или эксплуатации решений по защите данных и DSPM/DSLP/DPMS.

Responsibilities

• Разрабатывать и внедрять технические средства защиты данных: MS 365, конечные точки, облачные платформы и SaaS.
• Работать с технологиями Purview, DLP, DSPM и IRM для обнаружения и классификации конфиденциальных данных.
• Поддерживать полный цикл разработки — от оценки до развёртывания и передачи в эксплуатацию.
• Переводить требования по защите данных в политики и технические меры.
• Анализировать результаты обеспечения безопасности и предлагать приоритетные решения.
• Проводить мастер-классы и представлять технические выводы клиентам.
• Сотрудничать с бизнес- и ИТ-заинтересованными сторонами и ясно объяснять варианты.

Skills

English proficiency

German proficiency

Tools

Microsoft Purview

Cyera

Varonis

BigID

Job description

Описание:

PwC CEE Cybersecurity Center team is made up of more than 200 specialists. We help companies design and build their digital resilience, create cybersecurity strategies, and assess cybersecurity maturity. Our team helps create and operationalize cybersecurity processes such as monitoring or incident response and supports clients in the implementation of specific security systems.

Задачи:

• Design, implement and operate technical controls to protect sensitive data across Microsoft 365, endpoints, cloud platforms, data repositories, SaaS applications and AI environments
• Work hands-on with technologies such as Microsoft Purview, DLP, DSPM and Insider Risk Management (IRM) to discover and classify sensitive data, identify security exposures, configure protection policies and remediate identified risks
• Support the complete engineering lifecycle, from technical assessment and solution design through configuration, integration, testing and deployment to operational handover
• Translate data protection, security and compliance requirements into effective, scalable and practical technical solutions
• Analyse security findings and develop practical, prioritized remediation recommendations
• Facilitate client workshops and present technical findings
• Collaborate with security, IT and business stakeholders and communicate technical issues, options and recommendations clearly

Требования:

• Experience in designing, implementing or operating solutions in at least one of the following areas: DLP, information protection and data classification, sensitive data discovery or Data Security Posture Management (DSPM)
• Knowledge of Microsoft Purview or another enterprise data security platform
• Understanding of sensitive data discovery and classification processes across cloud and on-premises environments
• Ability to translate business, security and compliance requirements into data security policies and technical controls
• Ability to analyse security findings, take ownership of assigned activities and communicate effectively with technical and non-technical stakeholders
• Proficiency in English
• Будет плюсом: Hands-on experience with Microsoft Purview, DLP or DSPM solutions such as Cyera, Varonis or BigID, as well as other data security technologies; Knowledge of AI security and experience with AI security solutions; Experience with cloud security across Microsoft Azure, AWS or Google Cloud; Understanding of identity and access management principles, including permissions, access governance and excessive access risks; Understanding of data privacy, information governance and relevant security or privacy frameworks; Relevant Microsoft or other security certifications, such as SC-100, SC-200, SC-300 or SC-401; Professional proficiency in German

Условия:

Work flexibility – hybrid working model (min. 2 days in the office per week), flexible start of the day, workation, sabbatical leave Development and upskilling - our full support during onboarding process, mentoring from experienced colleagues, training sessions, workshops and conversations with native speaker Wide medical and well-being program - a medical care package (incl. freedom of treatment, physiotherapy, discounts on dental care), coaching, mindfulness sessions, psychological support, education through dedicated webinars and workshops, financial and legal advice Possibility to create your individual benefits package (a.o. lunch pass, insurance packages, concierge, veterinary package for a pet, massages) and access to a cafeteria - vouchers, discounts on IT equipment and car purchase 3 paid hours for volunteering per month Additional paid Birthday Day off And when you start enjoying PwC as much as we do, you may recommend your friend to work with us.