IT Security Cloud Data Protection Engineer - FT

Veridian Credit Union; Cedar Falls (IA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Veridian Credit Union is seeking an IT Security Cloud Data Protection Engineer focused on securing Microsoft 365 and Azure environments, with MPIP to enforce data governance and compliance.

You will design, implement, and maintain MPIP policies, work with IT Security Analysts, monitor threats, and guide stakeholders on cloud security best practices in a hybrid environment with on-call support as needed.

Qualifications

• Bachelor’s degree in computer science, information systems, or related field, or equivalent combination of education, training and 8+ years experience.
• 2+ years of cloud security design experience with a focus on M365 and Azure.
• Familiarity with financial regulatory/compliance requirements (NCUA, FFIEC, HIPAA, GLBA, PCI DSS).
• Knowledge of cybersecurity frameworks (NIST, CSF 2.0, CIS, ISO 27001-2022).

Responsibilities

• Serve as SME for MPIP suite and related tools.
• Design, implement, and maintain MPIP for M365, Azure, and on-premise.
• Develop and enforce MPIP policies, standards, and best practices for cloud resources.
• Deploy data classification and DLP to align with governance solutions.
• Collaborate with IT Security to monitor, investigate, and respond to policy violations and alerts.

Skills

MPIP (Microsoft Purview) expertise

Cloud security design

M365 & Azure security

Regulatory compliance knowledge

Education

Bachelor’s degree in CS/IS or equivalent

Tools

Microsoft Purview

NIST CSF / ISO 27001

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full-Time OH Ankeny, IA, US

This is a hybrid position that requires individual to work 2 days a week from our location in Cedar Falls - IA, Johnston - IA or Omaha - NE.

Location: Des Moines Metro, IA / Cedar Falls, IA / Omaha, NE

Hybrid eligible

Exempt

Summary

The IT Security Cloud Data Protection Engineer is focused on securing Microsoft 365 and Azure environments, with a strong emphasis in using Microsoft Purview Information Protection (MPIP) to enforce and align the security posture with data governance and compliance standards.

Essential Functions

• Serve as the subject matter expert for Microsoft Purview Information Protection (MPIP) suite of tools.
• Design, implement, and maintain MPIP for M365, Azure, and on-premise.
• Develop, document, and enforce MPIP security policies, standards, and best practices for cloud-based resources across the Microsoft tenant (Exchange, SharePoint, OneDrive, Teams, Azure).
• Deploy and configure data classification in Microsoft 365 and Azure to ensure alignment with Veridian’s Data Governance solution Lightbeam.ai.
• Design and deploy MPIP data loss prevention (DLP) that aligns with Veridian’s current standards and on-premise solutions.
• Work collaboratively with the IT Security Analyst and Specialists to monitor, investigate, and respond to policy violations and security alerts related to data handling using Microsoft Purview dashboards and alerts.
• Stay current on emerging threats, vulnerabilities, and security requirements affecting Veridian’s cloud environment.
• Work with cross departmental teams to support business initiatives leveraging M365 and Azure, ensuring security requirements are established and adhered to.
• Evaluate and recommend new security solutions based on emerging threats.
• Collaborate with stakeholders to understand data governance needs and ensure proper information lifecycle management.
• Provide guidance and training to stakeholders on cloud security best practices and data governance requirements.
• Stay up to date with evolving Microsoft security features, compliance regulations, and industry trends.
• On call availability required for system support as needed (including nights and weekends).
• Monitor and provide solutions to IT Security support tickets.

Key Attributes

• Oral and written communication skills.
• Member service focus.
• Attention to detail and accuracy.
• Positive attitude that supports a team environment.
• Dependable and punctual; flexible during peak times.
• High level of confidentiality.
• Organizational skills.
• Self-motivated; ability to work without close supervision.
• Problem solving; analysis.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job:

• Occasionally lift and/or move items over 50 pounds.
• Remain sedentary (seated) for extended periods of time.

Working Conditions

This job operates in a professional office environment and routinely uses standard office equipment.

Travel

Limited travel expected.

Required Education and Experience

• Bachelor’s degree in computer science, Information Systems, or related field or equivalent combination of education, training, and experience of 8+ years.
• 2+ years of experience developing and designing cloud security with a focus on M365 and Azure.
• Knowledge of cybersecurity frameworks (NIST, CSF 2.0, CIS, ISO 27001-2022).
• Familiarity working with financial regulatory and compliance requirements including NCUA, FFIEC, HIPAA, GLBA, and PCI DSS requirements.

Preferred Education and Experience

• 8+ years of experience working with information security.
• 4+ years of experience configuring and managing Microsoft Purview specifically with data classification, data loss prevention, and insider risk management.
• Prior experience with incident response and case management in cloud environments.
• Certifications: Microsoft 365 Security Administrator or Azure Security Engineer.

Other Duties

Veridian Credit Union is a PCI compliant financial institution to ensure the security of member information. As such, all employees are expected to ensure security measures are in place and adhered to regarding PCI and other highly secure data compliance requirements.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.