Job Description cxLoyalty is a global leader in loyalty and engagement solutions. With 35 years of experience and 200 million consumer touchpoints worldwide, cxLoyalty's unique combination of platform, content and delivery at scale set us apart in the marketplace. Over 3,000 leading banks, retailers, travel and telecom companies worldwide select cxLoyalty to design, administer and fulfill loyalty and engagement programs that strengthen and expand the value of their customer relationships.
Reporting to the Director, Data Loss Prevention this position will support the overall data protection program within the organization. This role is part operational and part strategic. You will be responsible for the day to day management of DLP technologies (Endpoint, Cloud, Email & Web), tuning and ensuring that logs are events are fed to the SIEM for triage by our security analysts. You will also be responsible for supporting the overall DLP charter and strategy as well as contributing to new DLP use cases. This person will interface closely with a wide variety of personnel, including other Cyber Security staff, Directors, Managers, Engineers, Architects and other internal customers.
Duties & Responsibilities:

• Develop and implement DLP security solutions in alignment with the global cyber security strategy.
• Administration of the DLP tools which includes configuring policies, tuning, upgrading and patching, etc.
• Strive to continually improve the DLP solutions and response protocol.
• Document architecture, processes and controls pivotal to improving the DLP program to ensure compliance with security control requirements as defined by the Cyber Security leadership team.
• Support day-to-day administration of DLP solutions, servicing escalated tickets from the helpdesk or SOC and monitoring DLP systems
• Execute and manage data discovery solutions
• Monitor industry trends for emerging risks and information needs
• Drive automation wherever possible into the program
• Act as Subject Matter Expert for Audit, Compliance and Regulator inquiries.
• Experience working both independently and in a virtual, collaborative environment is essential. Comfortable working with stakeholders and virtual teams across global locations.

Skills and Experience:

• Degree in Computer Science, Information Systems, Engineering or a related field
• Proven experience in one or more Data Loss Prevention (DLP) Technologies
• Proven experience with performing DLP system maintenance and support, rules and signature creation and tuning, query support, custom report creation, and disaster recovery of DLP operations planning
• Experience with reviewing opportunities for process automation and improvement via scripting and other methodologies.
• Experience with generating daily and monthly reports, including items, such as incident and service requests, software updates, and performance analysis for all tools against approved baselines
• Experience with developing performance baselines for all DLP tools
• Experience in administration of a DLP tool which includes configuring policies, upgrading and patching
• Able to understand and identify data classification categories with the ability to handle sensitive data in an appropriate manner with integrity and confidentiality while responding to alerts in a timely fashion.
• Ability to independently research and solve technical issues
• Proven effective verbal and written communication skills
• Security and systems administration certifications preferred (CISSP, GSEC, MCSE, etc).
• Understanding of technical and organizational security vulnerabilities, threats, and risks
• Ability to troubleshoot and solve complex problems rapidly.
• Desired Technical Knowledge:
  • Experience operating and tuning DLP technologies
  • Experience with Netskope Cloud Access Security Broker (CASB), Forcepoint DLP (Web and Endpoint), Proofpoint DLP, Native O365 DLP
  • Cloud platform familiarity as it relates to DLP solutions (AWS, Azure, GCP).
  • Operating Systems (Windows/Mac/Linux)
  • Basic Networking - VPN, TCP/UDP protocols (tcpdump, netstat, nslookup, ipconfig)
  • Basic Encryption - SSL, AES, IPSec, Key Management, Certificates
  • Ancillary Services - DNS, Web Server, LDAP/AD, Database technologies
  • Technology Applications - Nessus, Wireshark, SIEM, AV Solutions, IDS
  • Intermediate Level Scripting - e.g., Python, PowerShell

About Us JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. In accordance with applicable law, we make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as any mental health or physical disability needs.
The health and safety of our colleagues, candidates, clients and communities has been a top priority in light of the COVID-19 pandemic. JPMorgan Chase was awarded the "WELL Health-Safety Rating" for all of our 6,200 locations globally based on our operational policies, maintenance protocols, stakeholder engagement and emergency plans to address a post-COVID-19 environment.
As a part of our commitment to health and safety, we have implemented various COVID-related health and safety requirements for our workforce. Employees are expected to follow the Firm's current COVID-19 or other infectious disease health and safety requirements, including local requirements. Requirements include sharing information including your vaccine card in the firm's vaccine record tool, and may include mask wearing. Requirements may change in the future with the evolving public health landscape. JPMorgan Chase will consider accommodation requests as required by applicable law.
Equal Opportunity Employer/Disability/Veterans
About the Team Our Consumer & Community Banking Group depends on innovators like you to serve consumers, small businesses, municipalities and non-profits. You'll support the delivery of award winning tools and services that cover everything from personal and small business banking as well as lending, mortgages, credit cards, payments, auto finance and investment advice. This group is also focused on developing and delivering cutting edged mobile applications, digital experiences and next generation banking technology solutions to better serve our clients and customers.