Lead Cybersecurity Engineer - Data Protection

Ppl Services Corp - Allentown, PA

Full-time

Allentown, PA

Administrative and Support Services

About the position

The Lead Cybersecurity Engineer - Data Protection at PPL Services Corporation is responsible for ensuring the security of data across the organization. This role involves developing and maintaining data protection policies, configuring security tools, and collaborating with cross-functional teams to enhance data governance and compliance. The engineer will also be tasked with identifying vulnerabilities, implementing security measures, and supporting the data security infrastructure to protect sensitive information.

Responsibilities

• Develop and maintain policies, procedures, and/or standards for data protection activities.
• Configure and manage data protection and monitoring tools to identify both security and operational related issues.
• Integrate data protection techniques within existing infrastructure and data flows.
• Create and/or Improve Data Flow Mapping and System Interface Tracking in conjunction with the Product Development and Enterprise Architecture teams.
• Maintain and support data security infrastructure (e.g. application, database, server, etc).
• Implement data protection measurements and standards within cloud environments, including Cloud Access Security Broker (CASB).
• Complete security assessments to identify data vulnerabilities and establish remediation/mitigation processes.
• Integrate data protection measures into the software development pipeline using secure software development lifecycle processes.
• Ensure compliance with relevant data privacy regulations, if applicable.
• Collaborate with cross-functional teams to establish and/or advance data governance, data dictionary, and data quality controls and monitoring processes.
• Identify and apply strategies to optimize resource utilization and minimize cost.
• All other duties and projects as assigned.

Requirements

• Bachelor's degree in Computer Science, Information Security, and/or a related field or an equivalent level of work related experience.
• A minimum of 7+ years of cybersecurity experience in data governance, data security, and/or data protection.
• Ground in data engineering and is familiar with one or more cloud-based data solutions/frameworks such as DataBricks, Spark, or Snowflake.
• Experience in establishing data security governance and establishing applicable policies, procedures, and/or standards.
• Expertise with data security and classification tools.
• Experience in developing data flow mapping.
• Strong understanding of cloud security and data protection in cloud environments.
• Understanding of data privacy regulations and compliance frameworks.
• Experience in participating in Incident Response activities and exercises.
• Experience in conducting investigations and communicating results to management.
• Strong leadership, communication, and interpersonal skills.
• Collaborative and effective in cross-function team environments.
• Strong analytical skills to assess risks and vulnerabilities in complex systems.

Nice-to-haves

• Certification in Cybersecurity or data privacy (e.g., CISSP, CISM, CDPSE, CIPP).
• Experience working in Agile teams and have knowledge of Agile principles and practices.
• Experience utilizing the Scaled Agile Framework (SAFe).
• Working knowledge in one or more of emerging technologies (e.g., Microservices, DevOps, Multi-Cloud technologies, IoT, Intelligent Automation, RPA, Test automation, artificial intelligence, etc.).
• Proficiency in scripting and automation for security testing.