Senior DLP Engineer — Data Security & Compliance

Bristol-Myers Squibb; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Bristol Myers Squibb is seeking an experienced DLP Engineer to advance our data security program and protect sensitive enterprise data. You will implement and manage enterprise data protection strategies, align with regulations, and build policy-driven controls across cloud, email, and endpoints.

The ideal candidate has 3–6 years in data security and DLP, with hands-on expertise in Microsoft Purview and other leading DLP tools, scripting, and regex-based content detection.

Qualifications

• 3–6 years of experience in data security and DLP.
• Hands-on with Microsoft Purview and other leading DLP tools.
• Experience with scripting and regex-based content detection.
• Knowledge of data classification, labeling, and encryption basics.
• Familiarity with DSPM and network DLP technologies.

Responsibilities

• Develop and implement data security and DLP policies across enterprise platforms.
• Configure and manage DLP rules and policies across platforms.
• Build SITs and regex-based patterns to detect sensitive data.
• Deploy information protection controls: classification, labeling, encryption.
• Utilize DSPM to identify data exposure risks and remediation plans.
• Monitor network DLP across web gateways, email, proxies, and CASB SaaS.
• Assess risks and implement controls to mitigate data security risks.
• Write scripts to automate DLP tasks and reporting.
• Stay current with industry trends in Purview, DSPM, AI-driven protection.

Skills

Data security

DLP

Regulatory compliance

Scripting (PowerShell/Python)

Regex patterns

AI concepts

Tools

Microsoft Purview

Symantec DLP

Forcepoint

Netskope

Zscaler

Job description

Bristol Myers Squibb is seeking an experienced DLP Engineer to advance our data security program and protect sensitive enterprise data. You will implement and manage enterprise data protection strategies, align with regulations, and build policy-driven controls across cloud, email, and endpoints.

The ideal candidate has 3–6 years in data security and DLP, with hands-on expertise in Microsoft Purview and other leading DLP tools, scripting, and regex-based content detection.