Data Security Policy Engineer

Our requirements

• Minimum 5+ years of experience in Data Security Engineering, Cybersecurity Policy, or DLP implementation.
• Hands on experience configuring and managing Data Loss Prevention tools – e.g. Symantec, Trellix, Proofpoint, Zscaler.
• Strong understanding of Data Security Policy Creation, Analysis, and Governance.
• Experience with data security concepts for both data in motion and data at rest.
• Familiarity with Agile methodology, project planning, and ticketing systems (Jira, Confluence).
• Ability to transform business requirements into security control implementation plans.
• Excellent communication skills for engaging with both technical and business stakeholders.
• Strong understanding of the cyber threat landscape and contemporary attack vectors in the financial sector.
• Proven experience providing production support for DLP or data security tooling.
• Bachelor’s degree in IT, Computer Science, or Cybersecurity (or equivalent professional experience).
• English proficiency (spoken and written).

Your responsibilities

• Engineer, create, and optimize data security and DLP policies to meet global and regional compliance requirements.
• Work with business lines to define and translate data protection requirements into policy configuration and enforcement.
• Support the full lifecycle of DLP implementation, including deployment, tuning, analysis, and policy maintenance.
• Design and maintain policies for data in motion, data at rest, and data in use scenarios.
• Partner with global teams to improve data security engineering frameworks in line with regulatory standards.
• Provide operational and production support for Data Security tools (Symantec, Trellix, Microsoft Information Protection, Zscaler, Proofpoint).
• Manage policy onboarding, migrations, and BAU transitions to service teams.
• Engage in the evaluation, adoption, and configuration of new data discovery and protection innovations.
• Monitor and report policy performance and control effectiveness, providing management information (MI/KXI).
• Support audits and inspections, providing evidence, reports, and compliance documentation.
• Document all changes and procedures in Confluence and manage tasks via Jira.
• Train and mentor junior analysts, sharing expertise in security process design and policy governance.
• Build and maintain trusted relationships with internal stakeholders, industry peers, and external vendors
• Note: Detailed project information will be shared during the recruitment process.

About the project

This is how we organize our work

This is how we work on a project

• DevOps
• documentation
• issue tracking tools

What we offer

• Hybrid work setup – 6 days per month in the office in Krakow - remote days available depending on the client’s arrangements
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Mindbox Sp. z o.o.