Security Specialist - Data Protection

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a Security Specialist within PNC's Technology organization, you will be based in Pittsburgh, PA, .Strongsville,

OH, Dallas, TX, Birmingham, AL, Denver, CO, Phoenix, AZ.

We are seeking an experienced Senior Data Protection Engineer / Analyst to join our Enterprise Data Protection team. This role will be responsible for designing, implementing, monitoring, and continuously improving data protection controls across the organization. The ideal candidate will possess deep expertise in Data Loss Prevention (DLP), insider threat investigations, data discovery, classification, and governance, with hands-on experience in both Symantec DLP and Microsoft Purview environments.

Key Responsibilities

Design, implement, and maintain enterprise Data Loss Prevention (DLP) controls and policies.

Administer and support Symantec DLP and Microsoft Purview Data Protection technologies.

Monitor and investigate DLP alerts, policy violations, and insider threat activities.

Perform structured and unstructured data discovery, classification, and risk assessments.

Develop and maintain data classification and labeling standards.

Configure and manage Exact Data Matching (EDM) repositories and detection rules.

Implement and optimize endpoint DLP controls across enterprise endpoints.

Collaborate with Security Operations, Risk Management, Compliance, Legal, and Human Resources teams during investigations.

Analyze data flows and identify opportunities to strengthen data protection controls.

Support data governance initiatives, regulatory compliance efforts, and risk management programs.

Develop reporting and metrics related to data protection effectiveness and program maturity.

Participate in incident response and digital investigation activities involving sensitive data exposures.

Required Qualifications

Experience

3+ years of Data Loss Prevention (DLP) experience.

3+ years of Symantec DLP administration and engineering experience.

3+ years of Microsoft Purview experience supporting data protection and compliance capabilities.

Experience supporting Insider Threat monitoring, investigations, and remediation activities.

Experience performing structured and unstructured data scanning and discovery.

Technical Skills

Symantec DLP

Microsoft Purview DLP

Endpoint DLP

Exact Data Matching (EDM)

Data Classification and Labeling

Structured and Unstructured Data Discovery

Microsoft 365 Security & Compliance

Insider Threat Monitoring and Investigations

Incident Response and Digital Investigations

Data Governance

Sensitive Information Types (SITs)

Data Protection Policy Development

Risk Assessment and Control Design

Preferred Qualifications

Experience protecting data across Microsoft 365, SharePoint Online, One Drive, Teams, and Exchange Online environments.

Experience with Microsoft Defender security technologies.

Understanding of information protection and sensitivity labeling.

PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals.

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description

* Provides technical evaluation and analysis in a specific Security area. Supports activities, process, and tools needed to improve overall security posture of the organization. Primary responsibilities do not include Architect or Engineering responsibilities.

* Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and…