Senior Data Protection Specialist

Our client, a leading global financial institution, is seeking a Senior Data Protection Specialist to strengthen their data protection and privacy program.

The role involves defining, implementing, and operationalizing data protection policies using BigID and ensuring compliance with industry regulations. The ideal candidate will work closely with cross-functional teams to discover and secure sensitive data across the enterprise, aligning with frameworks like GDPR, CCPA, and PCI-DSS for a robust data security posture.

1. Act as the technical expert and primary contact for BigID implementation at Customer site
2. BigID Platform Management: Install, configure, and maintain the BigID platform in an enterprise environment, ensuring it operates optimally for data discovery and classification across structured and unstructured data.
3. Monitor system performance, troubleshoot issues, and apply updates or patches to keep the BigID deployment secure and efficient
4. Policy Definition & Enforcement: Define, implement, and operationalize data protection policies using BigID, customizing the tool's workflows and rules to meet organizational and regulatory requirements.
5. This includes setting up sensitive data identification rules, configuring classification tags, and enforcing data handling policies in line with GDPR, CCPA, PCI-DSS, and other compliance standards
6. Data Discovery & Classification: Leverage BigID's capabilities to automatically discover and classify sensitive data (customer information, financial records, PII, etc.) across on-premise and cloud environments.
7. Ensure that discovered data is properly labelled and protected according to its sensitivity, and remediate any identified data security issues or misconfigurations.
8. Support continuous improvement of BigID policy workflows, risk models, and reporting dashboards
9. Collaboration & Advisory: Work closely with data governance, IT security, compliance, and legal teams to align BigID's configuration with business needs and regulatory obligations.
10. Provide guidance to stakeholders on using BigID for privacy compliance (e.g., to support data subject access requests or consent management), and collaborate on integrating BigID findings into broader security strategies.
11. Troubleshoot technical issues and provide day-to-day engineering support for BigID platform operations
12. Work with BigID's technical support and product team to escalate and resolve product-level challenges

1. 3–5 years of experience in information security or data protection engineering, with hands-on expertise in BigID.
2. Proven track record implementing data discovery, DLP, or privacy solutions in a production environment is essential. Proven experience working with BigID
3. Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).
4. Ongoing education or certifications in security and privacy are a plus (see Preferred Skills).
5. Familiarity with data protection regulations and standards: GDPR, CCPA, PCI-DSS, MAS TRM, etc.
6. Hands-on experience with policy development, classification models, and data discovery workflows
7. Strong analytical skills and the ability to interpret large sets of structured/unstructured data
8. Experience with REST APIs, SQL, or scripting (Python preferred) is a plus
9. Strong communication and stakeholder management skills in enterprise environments

1. Experience working in or supporting a financial institution or global bank
2. Understanding of cloud data sources (AWS, Azure, GCP) and integration with BigID
3. Prior exposure to data loss prevention (DLP), CASB, or SIEM platforms
4. Knowledge of metadata tagging, identity-based access control, and RBAC models
5. Professional certifications in security or privacy are advantageous.
6. Relevant certs include CISSP, CISM, or CISA for security management, as well as privacy credentials like CIPT/CIPP for privacy technologists.
7. BigID-specific training or certification

This is a contract opportunity offering flexibility and autonomy to work remotely within India while interfacing with both regional and global security and privacy teams.

Occasional travel or extended hours may be required based on critical project timelines.