Data Security Engineer

The Data Security Engineer will work closely with various cross-functional teams to identify sensitive Personally Identifiable Information (PII) and other critical data, develop and enforce security policies, and implement ongoing data protection measures. This position will involve both managerial and individual contributor responsibilities, leading data security initiatives while also managing day-to-day operations.

Responsibilities :

- Identify and Classify Sensitive Data : Lead efforts to identify sensitive data across MPL's systems, including user PII, financial data, and other critical information.

- Implement a robust classification system for data protection.

- Data Security Policy Creation & Enforcement : Develop and implement data security policies, guidelines, and best practices to ensure the safety of sensitive information in line with industry standards and

regulatory requirements (GDPR, CCPA, etc. ).

- Mitigation and Risk Management : Create strategies to mitigate data security risks, particularly focusing on PII exposure. Conduct regular risk assessments and vulnerability analyses to ensure data security measures are robust.

- Data Security Monitoring : Implement continuous monitoring mechanisms for data security, ensuring that all activities comply with security policies.

- Respond promptly to incidents and provide insights into potential threats.

- Collaboration Across Teams : Work with cross-functional teams (e. g., Product, Engineering, Compliance, IT) to integrate security controls into product development and ensure security is baked into all aspects of the data lifecycle.

- Incident Response and Reporting : Lead the response to data-related security incidents, including investigations, root-cause analysis, and corrective actions.

- Maintain incident documentation and provide regular reports to senior leadership on data security metrics and incidents.

- Regulatory Compliance : Ensure that MPL complies with relevant data privacy regulations and certifications, helping prepare for audits and certifications (e. g., ISO 27001 GDPR compliance).

- Continuous Improvement : Stay up-to-date with the latest data security trends, technologies, and best practices.

- Evaluate and recommend improvements to existing data security tools and processes.

Requirements :

- Educational Background : Bachelor's degree in Computer Science, Information Security, or related field. Advanced degree or certifications (e. g., CISSP, CISM) preferred.

- Experience : Minimum 5 years of experience in data security, with a focus on PII protection, data encryption, risk management, and policy enforcement. Experience working in real-money gaming or similar regulated environments is a plus.

- Strong knowledge of data encryption, tokenization, masking, and key management in microservice architecture.

- Hands-on experience with data security tools and platforms (e. g., DLP, DSPM, CASB).

- Experience with cloud environments (AWS, GCP) and implementing data security solutions within these platforms.

- Understanding of data protection regulations and standards (GDPR, CCPA, etc. ).

- Familiarity with vulnerability management and incident response processes.

- Analytical Skills : Strong problem-solving and analytical abilities to identify security issues, assess risks, and design mitigation strategies.

- Communication : Excellent verbal and written communication skills. Ability to effectively communicate

complex data security issues to non-technical stakeholders.

- Leadership : Experience in leading projects and teams, managing resources, and prioritizing tasks. Ability to act as both a technical expert and a strategic manager.

- Certifications : CISSP, CISM, or other relevant data security certifications.

- Cloud Security : Experience with securing data in cloud platforms like AWS, GCP.

- Data Governance & Compliance : Experience with data governance frameworks and knowledge of privacy laws and regulations.