Data Protection Engineer

The Data Protection & Security Engineer will serve as the primary owner of First Student's data protection capability while also providing hands‑on security engineering support across cloud, infrastructure, and application security domains. This is a practitioner role. The position partners with IT, I&O, and Legal teams to design and operate security controls that protect student, employee, and operational data across cloud and on‑premises environments.

The role defines what must be protected and how, coordinates with I&O and Data teams to ensure controls are implemented correctly, and builds validation and reporting of outcomes.

This role is a direct replacement for a departing senior team member who owned both data protection and security engineering. Candidates must be comfortable holding both domains simultaneously and ramping quickly into an active program.

The Data Protection & Security Engineer will serve as the primary owner of First Student's data protection capability while also providing hands‑on security engineering support across cloud, infrastructure, and application security domains. This is a practitioner role. The position partners with IT, I&O, and Legal teams to design and operate security controls that protect student, employee, and operational data across cloud and on‑premises environments.

The role defines what must be protected and how, coordinates with I&O and Data teams to ensure controls are implemented correctly, and builds validation and reporting of outcomes.

This role is a direct replacement for a departing senior team member who owned both data protection and security engineering. Candidates must be comfortable holding both domains simultaneously and ramping quickly into an active program.

The Data Protection & Security Engineer will serve as the primary owner of First Student's data protection capability while also providing hands‑on security engineering support across cloud, infrastructure, and application security domains. This is a practitioner role. The position partners with IT, I&O, and Legal teams to design and operate security controls that protect student, employee, and operational data across cloud and on‑premises environments.

The role defines what must be protected and how, coordinates with I&O and Data teams to ensure controls are implemented correctly, and builds validation and reporting of outcomes.

This role is a direct replacement for a departing senior team member who owned both data protection and security engineering. Candidates must be comfortable holding both domains simultaneously and ramping quickly into an active program.

• Own enterprise data protection risk assessments, classification standards, and control effectiveness evaluations.
• Identify data exposure risk across cloud, SaaS, and on‑premises environments.
• Contribute to vulnerability assessments and architecture reviews within the Cybersecurity function.

• Design and define data protection control requirements and standards for DLP, encryption, key management, and data governance across cloud and on‑premises environments.
• Work with I&O and Data teams to ensure controls are implemented to Cybersecurity specifications; validate implementation outcomes.
• Provide security engineering expertise across cloud infrastructure and endpoint security domains.

• Monitor for data misuse, exfiltration, and policy violations.
• Integrate DLP detection capabilities with SOC workflows.
• Support SIEM log source expansion and alert quality improvements in coordination with the Security Operations function.

• Lead Cybersecurity response activities for data exposure incidents, including investigation direction, containment guidance to I&O, remediation oversight, and lessons learned.

• Develop and maintain data protection policies aligned with FERPA, CCPA, Canadian provincial privacy laws, and enterprise risk objectives.
• Own the data classification framework and drive operationalization across key data stores and workflows.
• Contribute to management reporting, risk acceptance documentation, and work tracking.