Lead AI and Data Security Engineer

East West Bank; San Marino (CA); On-site; USD 160,000 - 220,000; Full time

Job summary

East West Bank is seeking a Senior Information Security Engineer – Data Security to lead enterprise data protection initiatives across on‑premise, cloud, and applications. You will design and operate a DSPM program, implement masking and handling controls, and ensure secure AI usage with Microsoft Purview.

The role requires 8+ years of security engineering experience, expertise in data governance tools, and strong scripting skills. Prior banking or regulated environment experience is preferred.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• 8+ years of hands‑on information security engineering experience.
• 3+ years of data security, data protection, or similar roles.

Responsibilities

• Lead and execute major data security projects (data masking, handling, loss prevention, classification, sanitization).
• Design, build, and operate a DSPM program across on‑premise and cloud environments.
• Implement controls to reduce data exposure and unauthorized access.
• Integrate Microsoft Purview for AI data governance and secure AI usage.
• Monitor and respond to data protection events from SIEM, DLP, DSPM, and Purview.

Skills

Automation & scripting

Data security

Regulatory awareness

Security tooling

Education

Bachelor's degree in Cybersecurity or Computer Science

Advanced degree preferred

Tools

Delphix

Microsoft Purview

DLP tools

SIEM integrations (Splunk, LogRhythm, InsightIDR, Sumo Logic)

Job description

Introduction

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement.

Introduction

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement.

Headquartered in California, East West Bank (Nasdaq: EWBC) is a top-performing commercial bank with a strong foundation, an enterprising spirit and a commitment to absolute integrity. East West Bank gives people the confidence to reach further.

Overview

As the bank continues to grow, we are seeking a Senior Information Security Engineer – Data Security to lead and mature the bank’s data security capabilities. This role is hands‑on and delivery‑focused, responsible for protecting sensitive data across enterprise, cloud, and application environments through strong technical controls, automation, and continuous validation. This position will play a key role in major data security initiatives, including enterprise data masking and handling programs, the build‑out of a Data Security Posture Management (DSPM) program, and the expansion of AI security and data governance controls. The role partners closely with application, cloud, infrastructure, and security operations teams to reduce data risk and meet regulatory and audit expectations.

Responsibilities

• Data Security Engineering
• Lead and execute major data security projects, including enterprise data masking, data handling, data loss prevention, data classification and data sanitization initiatives across production and non‑production environments.
• Design, build, and operate a DSPM program to continuously discover, classify, and monitor sensitive data across on‑premise and cloud environments.
• Implement controls to reduce data exposure, unauthorized access, and data leakage risks.
• Integrate Microsoft Purview to ensure secure usage of AI-powered tools and sensitive data governance.
• Tune and optimize detection rules to improve visibility and reduce false positives.
• AI Security & Data Governance
• Implement and operate AI security controls to ensure sensitive data is protected when used by AI‑enabled and automation tools.
• Partner with governance and technology teams to enforce secure use of AI systems involving regulated or sensitive data.
• Leverage Microsoft Purview for data governance, data loss prevention, and analytics across structured and unstructured data.
• Security Monitoring & Incident Response
• Monitor security events and alerts related to data protection from SIEM, DLP, DSPM, and Purview platforms.
• Investigate data‑related security incidents and support response, containment, and remediation efforts.
• Collaborate with SOC, IT, and cloud teams to ensure effective resolution and documentation
• Compliance, Audit & Reporting
• Ensure data protection controls align with regulatory and industry requirements (e.g., GLBA, CCPA, ISO 27001).
• Produce reporting and metrics on data classification, access, violations, and risk posture.
• Support internal and external audits by providing evidence and demonstrating control effectiveness.
• Engineering & Automation
• Support secure cloud deployments (such as AWS, Azure, etc) and implement controls for data access and movement.
• Automate security assessments, reporting, and policy enforcement across tools.
• Maintain engineering documentation and contribute to security architecture reviews.
• May perform other duties as assigned

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; advanced degree preferred.
• 8+ years of hands‑on information security engineering experience.
• 3+ years of experience in data security, data protection, or similar roles.
• Hands‑on experience with data masking and handling tools such as Delphix or other.
• Experience building or operating DSPM, data discovery, or data governance programs. Hands‑on experience with Purview, Cyera or equivalent tools.
• Proficiency with DLP and data governance tools such as Microsoft Purview, Digital Guardian, Forcepoint, Varonis, or similar.
• Experience integrating security tooling with SIEM platforms (e.g., Splunk, LogRhythm, InsightIDR, Sumo Logic).
• Familiarity with AI security risks, data usage controls, and governance in AI‑enabled environments.
• Strong automation and scripting capabilities.
• Experience working in regulated environments, preferably financial services.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CCSP, GIAC, CEH, or CISA.
• Experience securing data in cloud environments (AWS, Azure, GCP).
• Strong analytical, troubleshooting, and communication skills

Applicants must have legal authorization to work in the United States. We do not offer visa sponsorship at this time.

Compensation

The base pay range for this position is USD $160,000.00/Yr. - USD $220,000.00/Yr. Exact offers will be determined based on job‑related knowledge, skills, experience, and location.