Summary

Under minimal supervision, the Data Security Engineer III is a front-line member of the Data Security team that has responsibility for protecting corporate information assets. The Data Security Engineer III will be responsible for configuring and improving DLP policies on multiple tools, working towards increasing DLP Program coverage, crafting and maintaining DLP Program process documentation, defining new processes and controls to further mature the DLP Program, and addressing gaps that impact the DLP process.

Essential Duties & Responsibilities

• Deploys and manages technology and process solutions to reduce the potential of data compromise
• Develops technical requirements, evaluating vendor solutions, and testing of data security solutions
• Utilizes security tools to enhance data loss prevention capabilities across the Enterprise
• Tune DLP policies on a continuous basis to maintain a mature set of policies within the scope of the DLP Program.
• Implement security policies to comply with data privacy, governance and regulatory requirements
• Performs data protection monitoring and reporting, analyzes security alerts and escalates security alerts to local support teams.
• Proposes improvements and assists in the implementation of enterprise wide security policies, procedures and standards to meet compliance responsibilities.
• Prepares status reports to develop security risk analysis scenarios.
• Assist in documenting standard operating procedures and protocols for the Data Security Pillar
• Assist in the development of technical solutions and processes to help mitigate security vulnerabilities and automate repeatable tasks.
• Partner with teams as needed to enhance DLP monitoring / response processes on an ongoing basis.

Qualifications

• Strong understand of how to identify and prioritize security incidents and/or escalate to management or other team members.
• Experience translating data security questions into data analytical approaches
• Hands-on experience in security systems, including data loss prevention, data classification, etc.
• Understanding of data classification frameworks and processes
• Knowledge of information security standards including CIS Critical controls and the NIST Cybersecurity Framework.
• Ability to systematically assess a problem or situation to accurately identify probable causes and solutions.
• Understanding of a broad range of IT disciplines that would impact overall security posture.
• Proficiency in relating complex technical situations to non-technical customers.
• Ability to prioritize workload and consistently meet deadlines

Education & Experience

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field; or related combination of education and experience
• 4 years experience in an information technology or information security role
• CISSP, CISM, or Security certifications preferred

About Stifel

Stifel is a more than 130 years old and still thinking like a start-up. We are a global wealth management and investment banking firm serious about innovation and fresh ideas. Built on a simple premise of safeguarding our clients’ money as if it were our own, coined by our namesake, Herman Stifel, our success is intimately tied to our commitment to helping families, companies, and municipalities find their own success.

While our headquarters is in St. Louis, we have offices in New York, San Francisco, Baltimore, London, Frankfurt, Toronto, and more than 400 other locations. Stifel is home to approximately 9,000 individuals who are currently building their careers as financial advisors, research analysts, project managers, marketing specialists, developers, bankers, operations associates, among hundreds more. Let’s talk about how you can find your place here at Stifel, where success meets success.

At Stifel we offer an entrepreneurial environment, comprehensive benefits package to include health, dental and vision care, 401k, wellness initiatives, life insurance, and paid time off.

Stifel is an Equal Opportunity Employer.