О компании
The Technical Data Protection function is responsible for implementing and operating technical controls that protect the company's sensitive, confidential, personal, financial, and payment data.
Обязанности
- Implementing, configuring, and operating DLP controls across endpoints, cloud services, email, collaboration platforms, and data storage environments
- Creating and maintaining DLP policies for personal, financial, payment, confidential, and other sensitive data
- Integrating data classification and labelling with technical enforcement and monitoring controls
- Developing detection logic based on data types, labels, content patterns, context, user behaviour, destinations, and business processes
- Investigating DLP alerts and potential data leakage cases in collaboration with SOC, Legal, Privacy, HR, and relevant business teams
- Tuning policies to reduce false positives while maintaining effective protection and monitoring coverage
- Implementing data discovery and scanning processes to identify sensitive data stored across corporate environments
- Supporting the implementation of encryption, masking, tokenisation, access controls, and other technical data protection mechanisms
- Collecting DLP and data security events in SIEM and creating monitoring dashboards, alerts, and operational metrics
- Integrating data protection tools with SIEM, Jira, identity platforms, cloud services, and automation workflows
- Automating repetitive operational tasks, policy deployment, evidence collection, reporting, and incident enrichment
- Testing data protection controls and validating that policies work as expected before production rollout
- Maintaining technical documentation, operating procedures, implementation guides, and response playbooks
- Supporting onboarding of new systems, repositories, data sources, and business processes into the data protection framework
- Identifying control gaps and proposing technical improvements based on incidents, testing results, and monitoring data
- Supporting audits and regulatory assessments by providing technical evidence of implemented data protection controls
Требования
- 1+ years of experience in Information Security, Security Engineering, Data Security, DLP, or a related technical role
- Practical experience implementing or operating DLP, data classification, data discovery, or cloud security controls
- Understanding of sensitive data types, data flows, data handling risks, and common data leakage scenarios
- Experience creating, testing, and tuning security policies and detection rules
- Understanding of encryption, masking, tokenisation, access control, and secrets protection
- Experience analysing security events, investigating alerts, and documenting findings
- Familiarity with cloud services, enterprise collaboration platforms, and modern data environments
- Basic scripting or automation skills using Python, Bash, APIs, or workflow automation tools
- Strong troubleshooting skills, attention to detail, and a structured approach to technical implementation
- Ability to collaborate with technical and non-technical teams
- English B1+ for working with documentation, tools, and international teams
Условия
- Relocation support to one of our hubs — Cyprus, Serbia, Georgia or Kazakhstan — with assistance for the employee and their family
- Flexible work from one of our offices or remote
- Healthcare Coverage
- Education Budget: Language lessons, professional training and certifications
- Wellness Budget: Mental health and fitness activity reimbursements
- Vacation policy: 20 days of annual leave and paid sick leave
- Bonus skills: Experience with Google Workspace DLP, endpoint DLP, CASB, or similar security technologies
- Bonus skills: Experience with data discovery and classification across cloud storage, databases, or DWH platforms
- Bonus skills: Familiarity with Elastic Stack or another SIEM platform
- Bonus skills: Experience with AWS, Snowflake, PostgreSQL, or Kubernetes
- Bonus skills: Understanding of PCI DSS, privacy regulations, and financial data protection requirements
- Bonus skills: Experience integrating security products through APIs
- Bonus skills: Experience building dashboards, reports, or automated security workflows
- Bonus skills: Relevant security, cloud, or data protection certifications