Lead Cybersecurity Engineer - Data Protection

PPL - Louisville, KY

Full-time - Mid Level

Remote - Louisville, KY

1,001-5,000 employees

Utilities

About the position

The Data Protection Lead Engineer will play a crucial role in PPL Corporation's Cybersecurity organization, focusing on securing data through the development and implementation of policies, procedures, and technologies. This position involves close collaboration with engineering and IT teams to ensure the protection of PPL's data assets, monitoring and maintaining cybersecurity tools, and integrating data protection measures into existing systems and processes. The role is ideal for individuals passionate about data security infrastructure and risk mitigation.

Responsibilities

• Develop and maintain policies, procedures, and/or standards for data protection activities.
• Configure and manage data protection and monitoring tools to identify both security and operational related issues.
• Integrate data protection techniques within existing infrastructure and data flows.
• Create and/or improve Data Flow Mapping and System Interface Tracking in conjunction with the Product Development and Enterprise Architecture teams.
• Maintain and support data security infrastructure (e.g. application, database, server, etc).
• Implement data protection measurements and standards within cloud environments, including Cloud Access Security Broker (CASB).
• Complete security assessments to identify data vulnerabilities and establish remediation/mitigation processes.
• Integrate data protection measures into the software development pipeline using secure software development lifecycle processes.
• Ensure compliance with relevant data privacy regulations, if applicable.
• Collaborate with cross-functional teams to establish and/or advance data governance, data dictionary, and data quality controls and monitoring processes.
• Identify and apply strategies to optimize resource utilization and minimize cost.
• All other duties and projects as assigned.

Requirements

• Bachelor's degree in Computer Science, Information Security, and/or a related field or equivalent work experience.
• A minimum of 7+ years of cybersecurity experience in data governance, data security, and/or data protection.
• Background in data engineering and familiarity with cloud-based data solutions/frameworks such as DataBricks, Spark, or Snowflake.
• Experience in establishing data security governance and applicable policies, procedures, and/or standards.
• Expertise with data security and classification tools.
• Experience in developing data flow mapping.
• Strong understanding of cloud security and data protection in cloud environments.
• Understanding of data privacy regulations and compliance frameworks.
• Experience in participating in Incident Response activities and exercises.
• Experience in conducting investigations and communicating results to management.
• Strong leadership, communication, and interpersonal skills.
• Collaborative and effective in cross-functional team environments.
• Strong analytical skills to assess risks and vulnerabilities in complex systems.

Nice-to-haves

• Certification in Cybersecurity or data privacy (e.g., CISSP, CISM, CDPSE, CIPP).
• Experience working in Agile teams and knowledge of Agile principles and practices.
• Experience utilizing the Scaled Agile Framework (SAFe).
• Working knowledge in emerging technologies (e.g., Microservices, DevOps, Multi-Cloud technologies, IoT, Intelligent Automation, RPA, Test automation, artificial intelligence, etc.).
• Proficiency in scripting and automation for security testing.

Benefits

• Health insurance
• 401k retirement plan
• Paid holidays
• Flexible scheduling
• Professional development opportunities