ZICC Data Protection Engineer

POSITION SUMMARY
Zoetis, Inc. is the world's largest producer of medicine and vaccinations for pets and livestock.  The Zoetis Tech & Digital (ZTD) Global ERP organization is as a key building block of ZTD comprising of enterprise applications and systems platforms.

Join us at Zoetis India Capability Center (ZICC) in Hyderabad, where innovation meets excellence. As part of the world's leading animal healthcare company, ZICC is at the forefront of driving transformative advancements and applying technology to solve the most complex problems. Our mission is to ensure sustainable growth and maintain a competitive edge for Zoetis globally by leveraging the exceptional talent in India.

At ZICC, you'll be part of a dynamic team that partners with colleagues worldwide, embodying the true spirit of One Zoetis. Together, we ensure seamless integration and collaboration, fostering an environment where your contributions can make a real impact. Be a part of our journey to pioneer innovation and drive the future of animal healthcare.

 The Information Security Strategy & Risk Management team at Zoetis ensures a secure strategy through a disciplined process of making colleagues security savvy, driving down residual risk, reducing the attack surface, all while enabling the business. This team is responsible for critical services that strengthen Zoetis' security posture, including protecting sensitive data, identifying and mitigating cyber threats, and seamlessly integrating secure assets during organizational changes. Key functions within the team include Security Operations, Vulnerability Management, Threat Intelligence, Security Awareness, Mergers & Acquisitions Security, and Operational Technology (OT) Security. Through these services, the team empowers the organization to operate securely and efficiently in a dynamic digital environment. 

The Data Protection Engineer is responsible for the design, deployment, engineering, and continuous improvement of the organization's data protection technology stack. This role works closely with the Data Protection Service Lead and Sr. Data Protection Analyst team to ensure that data protection technologies are optimized and aligned with regulatory and business needs.

POSITION RESPONSIBILITIES  

   Percent of Time 

•    Deploy, configure, and operate data security solutions for data-in-motion, data-at-rest, and data-in-use across email, endpoint, network, and cloud.

•    Design and enforce DLP policies aligned to business needs and regulatory requirements; iterate to reduce false positives while increasing coverage.

•    Identify and protect sensitive data types (PII, PHI, PCI, confidential IP/source code) and align with data governance frameworks.

•    Integrate data security tooling with SIEM, CASB, UEBA, and ticketing/ITSM to enrich alerts and streamline triage and reporting.

•    Maintain dashboards and metrics on violations, severity, MTTR, policy efficacy; lead periodic configuration reviews.

•    Drive automation and process optimization for policy lifecycle, incident workflows, and reporting (e.g., via APIs and scripting)

•    Scripting for automation (PowerShell/Python) to streamline policy management and reporting.

•    Experience with data discovery/classification tools; cloud security controls in Azure/AWS/GCP

•    Familiarity with encryption, key management, and secure data handling practices    100%

ORGANIZATIONAL RELATIONSHIPS

•    Data Protection Service Lead (US) 

•    Sr. Data Protection Analyst team (US) 

•    Insider Threat Investigations Manager (US) 

•    L2 Analyst team (India)

EDUCATION AND EXPERIENCE 

Education:

•    Bachelor's degree in computer science, Information Security, or a related field (or equivalent experience).
Experience:

•    3–5 years of experience in Data Security/DLP operations in mid-to-large enterprises

•    Hands-on experience with at least one DLP platform: Microsoft Purview Information Protection (M365), Netskope CASB, Broadcom DLP

•    Strong understanding of data security principles, data classification, and regulatory compliance (GDPR, HIPAA, PCI-DSS)

•    Experience in incident management, root cause analysis, and reporting of DLP events.

•    Proficiency in integrating Data Security tools with SIEM/CASB/UEBA (Splunk, Microsoft Sentinel) and ITSM platforms.

•    Excellent analytical, communication, and documentation skills; strong attention to detail

TECHNICAL SKILLS REQUIREMENTS

•    High level of proficiency in data protection tools (e.g., Netskope, Symantec, Microsoft, etc.). 

•    Extensive knowledge of Windows, macOS, and/or Linux environments. 

•    Pharmaceutical or other regulated industry experience is desirable. 

•    Excellent verbal and written communication skills, with the ability to clearly present findings and recommendations to technical and non-technical audiences. 

•    Must be fluent in both written and spoken English, with the ability to communicate effectively across technical and non-technical audiences.

PHYSICAL POSITION REQUIREMENTS 

Regular working hours are from 3:00 AM to 12:00 PM EST. (ICC Second Shift)

Any unsolicited resumes sent to Zoetis from a third party, such as an Agency recruiter, including unsolicited resumes sent to a Zoetis mailing address, fax machine or email address, directly to Zoetis employees, or to Zoetis resume database will be considered Zoetis property. Zoetis will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Zoetis will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor but does not have the appropriate approvals to be engaged on a search.