Information Protection Engineer

This role is with a DeWinter Investment Management Partner

Boston, MA
- Hybrid Role
- We are targeting local candidates that can be in the Boston office 3 days per week.

12 Month + contract (or contract to hire, if desired)

Position Overview We are seeking an experienced Information Protection Engineer – DLP & Data Classification to support and enhance enterprise data-protection capabilities within a leading financial services organization.

This is a hands‑on engineering role focused on the design, implementation, administration, and continuous improvement of enterprise information‑protection capabilities, including data discovery and classification, sensitivity labeling, Data Loss Prevention (DLP), monitoring, and automated protection of sensitive information. The role will have a particular emphasis on the Microsoft Purview ecosystem.

The individual will work closely with Information Security, Technology, Legal and Compliance, and business stakeholders to identify sensitive information, classify and protect it appropriately, and implement controls that effectively reduce data risk without unnecessarily disrupting legitimate business activity.

Key Responsibilities

• Design, administer, maintain, and enhance Data Loss Prevention (DLP) policies and information-protection controls across supported platforms and data channels.
• Configure, test, tune, and optimize DLP policies to improve detection and protection while reducing false positives and unnecessary business disruption.
• Design, implement, and maintain Microsoft Purview sensitivity labels, information‑classification policies, and associated protection controls.
• Partner directly with business units, data owners, Legal/Compliance, and Information Security to identify sensitive information, understand how it is created, stored, shared, and used, and determine appropriate classification and protection requirements.
• Develop and implement approaches to discover, classify, and label sensitive content at scale, leveraging automated and recommended labeling, sensitive information types, trainable classifiers, Exact Data Match, and other appropriate technologies and techniques.
• Assess existing repositories and data sets to identify unlabeled, mislabeled, or inadequately protected sensitive information and work with business owners to remediate identified gaps.
• Develop practical processes and guidance that enable business users and data owners to appropriately classify and protect information, including exception and escalation processes.
• Integrate classification and sensitivity labels with DLP, encryption, access controls, endpoint controls, and other information-protection capabilities to provide appropriate protection based on the sensitivity of the information.
• Investigate DLP alerts and events, determine appropriate disposition and escalation, and partner with Information Security, Compliance, Legal, and business stakeholders when additional investigation is required.
• Analyze DLP and classification activity to identify control gaps, emerging risks, recurring behaviors, and opportunities to improve data-protection controls.
• Develop metrics and reporting to measure classification and labeling coverage, DLP effectiveness, policy adoption, exceptions, and other information-protection trends.
• Identify opportunities to use automation and AI-assisted capabilities to improve data discovery, classification, labeling, DLP monitoring, investigation, and response.
• Partner with GRC and Compliance teams to provide technical expertise, evidence, metrics, and control documentation for audits, client due diligence, risk assessments, and regulatory requirements.

Qualifications

• 5+ years of relevant experience in information security, information protection, data security, DLP, security engineering, or a related discipline.
• Demonstrated hands‑on experience implementing, administering, and improving enterprise DLP and information-protection technologies.
• Strong hands‑on experience with Microsoft Purview DLP, Information Protection, sensitivity labels, and data-classification capabilities is highly preferred.
• Experience designing or implementing enterprise data-classification and…