Data Protection Leader: AI Security & SaaS

Cybersecurity Jobs; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

Gym membership reimbursement

Profit Sharing Retirement Fund

401(k) plan

Parental leave

Paid time off

Sick time

Job summary

BCG Federal is seeking a Data Protection Engineer to operate and maintain data protection architecture across GCC High platforms aligned to NIST 800-171, DFARS 7012, and CMMC Level 2. The role supports secure SaaS solutions for clients and requires collaboration with Engineering, IT Service, Risk, and Security teams.

The ideal candidate has strong experience in information security, data protection, DLP, and sensitivity labeling, with familiarity in Azure, Purview, Defender, and Zscaler.

Qualifications

• 5-8+ years of experience in Information Security and Data Protection.
• 3-5+ years of Data Protection technical operational capabilities and strategies.
• Experience with data handling in AI tooling and management.
• Proficiency in data classification and tracking strategies.
• Familiarity with FedRAMP, NIST 800-171, and CMMC.
• Encryption and Data Loss Prevention (DLP) experience using sensitivity labeling.

Responsibilities

• Enhance and maintain the Data Classification and labeling technical strategy based on business, client, and compliance requirements.
• Translate compliance and client contractual obligations into an operational data schema.
• Collaborate with Engineering and IT Service teams to drive process improvements and effective execution.
• Work with Risk and Security teams to define a restrictive labeling strategy.
• Refine data protection policies to align with security needs.
• Present data analysis and recommendations to senior stakeholders.
• Lead data-driven egress monitoring and evolve related controls.
• Architect new data controls and strategy within emerging AI architecture.
• Evolve security tools and reporting with embedded AI security tooling.
• Collaborate with vendor technical teams to enable progress.
• Use newer technologies to automate containment and isolation while improving user behaviors.
• Conduct technical research to address new challenges.

Skills

Information Security

Data Protection

AI tooling data handling

Data classification

Security risk assessment

Compliance awareness

Communication skills

Tools

AWS

MS Azure

M365

Purview

Defender

Zscaler

Job description

BCG Federal is seeking a Data Protection Engineer to operate and maintain data protection architecture across GCC High platforms aligned to NIST 800-171, DFARS 7012, and CMMC Level 2. The role supports secure SaaS solutions for clients and requires collaboration with Engineering, IT Service, Risk, and Security teams.

The ideal candidate has strong experience in information security, data protection, DLP, and sensitivity labeling, with familiarity in Azure, Purview, Defender, and Zscaler.