Cybersecurity Data Protection Engineer

Global Sports Jobs Limited; Nashville (TN); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Discretionary bonus

Medical & dental insurance 80-100%

Mental health resources

Paid time off

Commuter benefits

Job summary

Creative Artists Agency (CAA) seeks a hands-on Security Engineer within the Information Security group to design, implement and manage data protection across SaaS and cloud environments. You will drive End-To-End security services, ensuring policy compliance and measurable controls across enterprise data assets.

The role emphasizes implementing Microsoft Purview-based DLP, DSPM, and information protection solutions, with collaboration across IT and business teams to safeguard data and meet

Qualifications

• Minimum 6 years in Information Technology.
• At least 3 years in data protection, Data Loss Prevention or information security engineering.
• Experience in enterprise environments with cross-functional teams.
• Bachelor's or Master's degree in a relevant field.
• Proven experience with Microsoft data security and data compliance technologies.
• Strong analytical skills to assess data risks.
• Familiarity with NIST, ISO 27001, GDPR, CCPA and certifications such as SOC, ISO, PCI DSS, FedRAMP.
• Understanding of servers, operating systems, cloud apps and infrastructure.
• Hands-on with DLP, DSPM/SSPM platforms, or cloud security (AWS/Azure/GCP).
• Knowledge of data protection techniques (encryption, tokenisation, masking), IAM, API security, modern app architectures.
• Experience integrating security tooling with SIEM/SOAR.
• Scripting experience (Python, PowerShell).

Responsibilities

• Develop a comprehensive data management plan for structured and unstructured data.
• Partner across technology teams to implement Microsoft Purview solutions and data protection controls.
• Conduct data discovery, classification and risk assessment across repositories.
• Integrate data protection with SIEM, EDR and ServiceNow/JIRA workflows.
• Configure and manage Endpoint DLP policies.
• Collaborate with business units to improve security workflows.
• Ensure secure configuration of solutions and governance of security controls.
• Coordinate with IRM leadership to deliver key security metrics.

Skills

Data protection

Data Loss Prevention

Information security

Security frameworks

GDPR/CCPA

Cloud security

Python

PowerShell

Microsoft Purview

SIEM

EDR

ServiceNow/JIRA

DLP tools

Education

Bachelor's or Master's degree

Tools

Microsoft Purview

SIEM

EDR

ServiceNow

JIRA

CrowdStrike

PowerShell

Job description

About the Role

This is a hands-on security position working within the Information Security group and with the internal IT department at large. The role's core focus is to ensure consistent, measurable end-to-end delivery of security services, developing and deploying capabilities so that enterprise systems and data are protected with the security controls and tools required to meet policy and compliance requirements. The postholder is responsible for designing, implementing and managing Data Protection and Data Security solutions in support of the CAA data protection programme, with a primary focus on safeguarding structured and unstructured data stored across SaaS applications, cloud storage solutions and custom-developed applications.

Key Responsibilities

• Develop a comprehensive plan for the management of structured and unstructured data in an enterprise environment, with a focus on business enablement.
• Partner across technology teams to create practical best practices for the implementation of Microsoft Purview solutions, including Data Loss Prevention, Data Security Posture Management, Information Protection, Insider Risk Management and Data Lifecycle Management.
• Conduct data discovery, classification and risk assessment across managed data repositories, including OneDrive, SharePoint, SaaS and custom-developed solutions storing company data.
• Integrate data protection controls with security and workflow toolsets such as SIEM, EDR and ServiceNow/JIRA.
• Configure, deploy and manage Endpoint DLP policies to prevent or monitor data exfiltration across company devices and BYOD.
• Partner with business groups to review workflows and produce output that enhances security processes in support of those workflows.
• Ensure that identified security considerations are implemented and that solutions are configured securely.
• Coordinate with IRM leadership to develop and deliver key security metrics, ensuring technical security controls meet desired objectives and that CAA's technical controls are measurably effective.

Required Experience & Qualifications

• A minimum of 6 years in Information Technology.
• A minimum of 3 years' experience in data protection, Data Loss Prevention or information security engineering.
• Experience in an enterprise environment with exposure to broader technology and business teams.
• A Bachelor's or Master's degree in a relevant field of work.
• Proven experience with Microsoft data security and data compliance technologies.
• Strong analytical skills in conducting due diligence to identify, assess and prioritise data-related risks.
• Familiarity with information security frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA) and information security certifications/attestations (SOC, ISO, PCI DSS, FedRAMP).
• A strong understanding of the fundamental operations of servers, operating systems, cloud applications and infrastructure.
• Hands-on experience with one or more of: DLP (e.g. Microsoft Purview, CrowdStrike), DSPM/SSPM platforms, or cloud security (AWS, Azure, GCP).
• Strong understanding of data protection techniques (encryption, tokenisation, masking), identity and access management principles, and API security and modern application architectures.
• Experience integrating security tooling with SIEM/SOAR platforms.
• Scripting/programming experience (e.g. Python, PowerShell or similar).

Preferred Skills

• Certifications such as CISSP, CISA/CISM or Microsoft Certified Information Protection Administration are preferred, but not required.
• Deep expertise in Microsoft's data security ecosystem, including Microsoft Purview, Endpoint DLP and adjacent data security solutions.
• A passion for cybersecurity, threat detection, risk mitigation and response.

Workplace

• Hybrid working arrangement.

Benefits & Perks

• Eligibility for a discretionary bonus.
• Company pays 80%–100% of the cost of medical, basic life and AD&D insurance, telemedicine, employee assistance and mental health counselling (in person, virtually or by text), paid vacation/holidays, paid sick time, paid parental leave and other paid leaves of absence, NICU leave, bereavement resources, adoption benefits, educational assistance
• Mental health resources and an employee assistance plan.
• Voluntary benefits available on election: dental and vision insurance, 401K plan, flexible spending accounts (health care and dependent care), health savings account, and voluntary life and AD&D insurance.
• Commuter benefits.
• Other statutory mandated benefits.

About the Company

Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing and philanthropy.