Data Protection Engineer, Senior

Senior Data Protection Engineer

We are looking for a seasoned Senior Data Protection Engineer to join our cybersecurity and compliance team. This role is critical in safeguarding sensitive financial data, ensuring regulatory compliance, and enabling secure collaboration across our Microsoft 365 environment. You will lead the implementation and optimization of Microsoft Purview and related M365 security tools to support our enterprise data protection strategy.

Key Responsibilities:

• Assist with designing and implementing data protection solutions using Microsoft Purview, Entra, and Defender XDR.
• Develop and maintain DLP policies, sensitivity labels, retention policies, and insider risk management rules tailored to financial data and regulatory requirements.
• Collaborate with Legal, Risk, Compliance, and IT teams to align data protection strategies with FFIEC, GLBA, SOX, and other banking regulations.
• Monitor and respond to data protection alerts and incidents, conducting root cause analysis and recommending remediation.
• Provide technical leadership and mentorship to junior engineers and cross-functional stakeholders.
• Stay current with evolving data privacy laws, regulatory guidance, and Microsoft roadmap updates.

Basic Qualifications:

• 3+ years of experience in data protection, cybersecurity, or technical engineering.
• 1+ years experience with Microsoft 365 security and compliance tools, especially Microsoft Purview.
• 3+ years experience with PowerShell scripting and automation in Microsoft environments.

Preferred Qualifications:

• Experience with financial data classification, insider risk programs, and secure collaboration in regulated environments.
• Experience with Copilot and other GenAI and the monitoring of their use.
• Familiarity with third-party risk management and vendor data handling practices.
• Experience in the financial services sector.
• Excellent analytical, documentation, and communication skills.
• Strong understanding of data governance, encryption, DLP, and regulatory compliance frameworks.
• Microsoft certifications such as SC-400 (Information Protection Administrator), SC-100 (Cybersecurity Architect), or equivalent.

Exempt Status: Yes (not eligible for overtime pay)

Workplace Type: Office

Our Approach to Office Workplace Type: Certain positions outside our branch network may be eligible for a flexible work arrangement. We're combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Huntington is an Equal Opportunity Employer. Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details. Note to Agency Recruiters: Huntington will not pay a fee for any placement resulting from the receipt of an unsolicited resume. All unsolicited resumes sent to any Huntington colleagues, directly or indirectly, will be considered Huntington property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.