Sr Security Engineer

at  CVS Health Ireland

CVS Health, the parent company of Signify Health, is increasing investments in digital, data, analytics and technology and Signify Health is excited to be involved!
We are hiring for a dynamic new initiative for CVS Health that will run out of our state-of-the-art offices at Bonham Quay. This is your opportunity to be involved with a pioneering business that is transforming health care in the United States by making customer experiences more seamless, convenient and personalised.
CVS Health is focused on driving business agility and growth through technology, data, digital and experiential innovations. ‘Digital First, Technology Forward and Data Driven’ is not simply an aspirational goal for the company, but a prerequisite to accelerated growth.
Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand — with heart at its center — our purpose sends a personal message that how we deliver our services is just as important as what we deliver.
Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.
As we reflect on our learnings and successes from remote work, we aim to provide a new state of the art flexible work environment in our Galway facility at Bonham Quay to support those objectives. Careers with offer flexible work arrangements and individuals who live and work in the Republic of Ireland will have the opportunity to divide their time between our Galway office and their home office.
The Security Engineer - Data Discovery is an important member of the Data Integrity Services team focused on leveraging advanced technologies and methodologies to discover, classify, and protect data across various platforms and environments. This position requires a deep understanding of data security principles, excellent technical skills, and the ability to lead a team in implementing effective data protection measures.
This Security Engineer will collaborate with privacy, compliance, ransomware protection, remediation, retention, data vaulting and recovery functions to align data security efforts with organizational goals. The ideal candidate will have proven success implementing innovative data discovery, classification and labeling technologies and processes for risk-driven data protection.

Primary Job Duties & Responsibilities:

• Design, configure and implement enterprise-wide data discovery, classification, and labeling capabilities across the hybrid on-prem and cloud environments.
• Create and tune data detection rules and engines to scan, tag, and categorize structured, semi-structed and unstructured data based on regulatory and business requirements.
• Collaborate with stakeholders to gather and document detailed product requirements, and to drive product development from concept to launch.
• Prioritize discovery and classification features based on business priorities and customer needs.
• Integrate data discovery tools with workflow, backup/restore, event logging, and applicable SaaS platforms.
• Provide technical guidance and mentorship to team members, ensuring high-quality deliverables and adherence to security best practices.
• Partner with systems and security architecture, application, databases, and storage teams to prioritize data security by design.
• Manage the sequencing and timing of project delivery with technology leadership, product, security engineering and delivery teams.
• Support data security incidents, audits, compliance, regulatory, client assurance, and third-party assessment requests.

Required Qualifications:

• 5+ years of technical data security experience building and managing sophisticated, tools and processes in support of cybersecurity protection and strategy initiatives.
• 3+ years of hands-on experience with engineering and administration of data discovery, labeling, and classification platforms.
• Continuous improvement mindset for fine-tuning processes and controls.
• Demonstrated experience working with a wide range of internal and external stakeholders.
• Comfortable working within areas of ambiguity, high degree of complexity and constantly changing environments.
• Strong analytical abilities, verbal/written communication, and interpersonal skills.

Preferred Qualifications:

• Experience with security solutions for data loss prevention, encryption, proxy, cloud data security, structured data security, and insider risk.
• Industry certifications from PMI, ISC2, SANS, ISACA, IAPP or equivalent.
• Knowledge of data security and privacy regulatory compliance, frameworks, and standards such as GDPR, CCPA, PCI, HIPAA, NIST, and FIPS 140-2.
• Continuous learner, well informed on technology trends, methodologies, and models.

Education:

• BS degree in Information Security, Computer Science and Engineering, Information Technology, or equivalent discipline

• Design, configure and implement enterprise-wide data discovery, classification, and labeling capabilities across the hybrid on-prem and cloud environments.
• Create and tune data detection rules and engines to scan, tag, and categorize structured, semi-structed and unstructured data based on regulatory and business requirements.
• Collaborate with stakeholders to gather and document detailed product requirements, and to drive product development from concept to launch.
• Prioritize discovery and classification features based on business priorities and customer needs.
• Integrate data discovery tools with workflow, backup/restore, event logging, and applicable SaaS platforms.
• Provide technical guidance and mentorship to team members, ensuring high-quality deliverables and adherence to security best practices.
• Partner with systems and security architecture, application, databases, and storage teams to prioritize data security by design.
• Manage the sequencing and timing of project delivery with technology leadership, product, security engineering and delivery teams.
• Support data security incidents, audits, compliance, regulatory, client assurance, and third-party assessment requests