Data Protection & Governance Engineer

Dentons US LLP; St. Louis (MO); Presencial; USD 120.000 - 145.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

401k

Profit sharing

Disability insurance (short/long-term)

Life insurance

Tuition reimbursement

Paid time off

Paid holidays

Discretionary bonuses

Descripción de la vacante

Dentons US LLP is seeking a Data Protection and Management Engineer to build and operate technical controls that safeguard confidential client data, ensure proper classification, and retain information as required. You will own day-to-day security posture management, DLP, retention, and sensitivity labeling, collaborating with Records, Governance, and practice teams.

The role emphasizes hands-on engineering and close cooperation with infrastructure, risk, and legal teams to protect data while

Formación

• Bachelor's degree in information technology, computer science, or a related field, or equivalent practical experience.
• 4+ years of experience in data protection, information security, or a closely related infrastructure discipline.
• Hands‑on experience with Microsoft Purview, including DLP, Information Protection and sensitivity labels, Insider Risk Management, Audit, and Communication Compliance.
• Working knowledge of DSPM or data access governance platforms (Microsoft, Varonis, Cyera, BigID, Netwrix).
• Familiarity with retention schedules, retention labeling, and defensible disposition, including legal holds interaction.
• Strong written communication and ability to explain data protection risk to attorneys and leaders.
• Experience in a law firm or professional services with confidentiality obligations.
• Familiarity with security models in document management systems (iManage Work, NetDocuments).
• Hands‑on experience with Purview Data Lifecycle Management, Records Management, or eDiscovery.
• Relevant certifications (Microsoft SC-401, SC-200, CISSP, CIPT, IGP).

Responsabilidades

• Operate the Firm's DSPM platform and onboard data sources across Microsoft 365, DMS, file shares, and cloud infrastructure.
• Remediate overshared repositories, excessive permissions, orphaned accounts, and unmanaged data stores; track remediation to closure.
• Author, test, and tune DLP policies across email, endpoint, cloud apps, browser, and removable media; manage workflows and investigate alerts.
• Configure retention labels and policies; support disposition reviews and defensible destruction; manage legal holds.
• Identify aging/duplicate data; report on data volume and storage reclaimed.
• Support DMS security policy management, ethical walls, and access controls.
• Operate Insider Risk Management, Information Protection, and Information Rights Management; build policies for departures and data staging.
• Apply data protection controls to AI tools; define guardrails for prompts and outputs; evaluate tooling.
• Automate policy deployment, labeling, retention, alert enrichment, and evidence collection; explore AI-assisted workflows.
• Occasional off-hours work, on-call rotation for data protection escalations, and limited travel.

Conocimientos

Data protection

Information security

DSPM platforms

Data loss prevention

Retention/disposition

Data classification

Insider risk management

Policy management

AI safety/guardrails

Automation scripting

Educación

Bachelor's degree in IT/CS or related field

Herramientas

Microsoft Purview

Varonis/Cyera/BigID/Netwrix

iManage Work Security Manager

Threat Manager / Purview Data Lifecycle

Descripción del empleo

Dentons US LLP is seeking a Data Protection and Management Engineer to build and operate technical controls that safeguard confidential client data, ensure proper classification, and retain information as required. You will own day-to-day security posture management, DLP, retention, and sensitivity labeling, collaborating with Records, Governance, and practice teams.

The role emphasizes hands-on engineering and close cooperation with infrastructure, risk, and legal teams to protect data while