The DLP (Data Loss Prevention) Security Engineer is responsible for supporting the activities related to managing and preventing the unauthorized distribution of Blackbaud’s data through the Blackbaud DLP Program. The Engineer is a technology and process focused security professional with an emphasis in information security, data classification, Digital Rights Management (DRM), and DLP. The Engineer will review, assess, recommend and implement policy and technical controls to ensure the Blackbaud DLP program is effective. 

Key Activities

Information Security Control Design & Maintenance

• Interviews company representatives and business owners to confirm anticipated business effects resulting from the actual occurrence of any of the identified enterprise security risks
• Reviews, develops, and implements security vendor agreements, and security exceptions to control standards as they relate to the DLP Program
• Conducts technical security reviews and assessments of current data handling practices
• Monitors and tracks remediation activities to address weaknesses and issues discovered through security reviews
• Develops strategies to ensure compliance with security standards as well as regulatory and audit issues
• provides periodic reporting including assessment findings and recommendations for improvement
• Maintain security solutions including proper operation, patch upgrades and vendor management
• Reviews existing toolsets, identifies operational gaps, and recommends security enhancements
• Assists in achieving security architecture compliance on requirements, including: Sarbanes-Oxley, payment card industry standards, HIPAA/HITECH, global data privacy requirements, as well as state and federal regulations
• Serves as information security subject matter expert on DLP/DRM solutions; provide advisory and consulting services as needed
• Provides technical lead on individual security projects across multiple technologies including infrastructure, secure electronic data transfer, network security, platform security and application security
• Assists with the design and implementation of disaster recovery and business continuity plans, procedures, audits and enhancements

Continue to Build a Strong Security Program

• Draft enterprise security standards and guidelines for proper operation of security toolsets for the DLP Program
• Evaluate and recommend new and emerging security products and technologies

Assess and mitigate risk

• Application and vendor risk assessment due diligence
• Assess IT risks through mergers and acquisitions and recommend mitigation strategies

Respond to Security Incidents

• Develop security operations that detect potential security incidents
• As a member of the Incident Response Team, performs analysis and technical tasks involving assignment and coordination of measures to provide information assurance, event detection, and rapid response

Education & Experience

• College degree in Computer Information Systems, Computer Science, Information Systems Management, or equivalent professional experience
• A minimum of 7 years of progressively responsible experience in the management of information systems with at least 4 years of formal experience in information security.
• Experience with:
  • Security Technologies / Methodologies
  • IT Audit/Risk Management
  • Information Security Metrics and Reporting
  • Systems Control Review Process
  • Data Loss Prevention/Digital Rights Management

Certifications

• Certification in highly technical information security disciplines such as: CISM, CISSP, CCSP, CCNP, CCDE, CCIE Security, and GIAC