For more than 170 years, The Hanover has been committed to delivering on our promises and being there when it matters the most. We live our values every day, demonstrating we CARE through our values, Sustainability initiatives and inclusive corporate culture.
We are seeking a highly skilled Senior Security Engineer to join our IT Security organization in Worcester, MA or in a remote work capacity.
POSITION SUMMARY:
You bring deep expertise in data protection, information governance, compliance technologies, and enterprise security architecture. This individual will serve as a technical leader responsible for administering, maintaining, enhancing, and strategically expanding the organization's Data Protection Program across cloud, SaaS, endpoint, collaboration, and enterprise data platforms.
The ideal candidate possesses hands-on experience implementing and operating enterprise-class Data Security Posture Management (DSPM), Data Loss Prevention (DLP), Information Protection, Records Management, eDiscovery, Insider Risk, and Data Governance solutions. Experience with platforms such as Microsoft Purview and other similar security control tools.
This role requires an individual who can operate at both the technical and strategic levels, partnering with Security, Legal, Compliance, Privacy, IT, Data Governance, and business stakeholders to mature and scale enterprise data protection capabilities.
This is a full-time, exempt position.
IN THIS ROLE, YOU WILL:
Data Protection Program Leadership
- Lead the ongoing administration, enhancement, and growth of the enterprise Data Protection Program.
- Develop and execute data protection roadmaps aligned with business, regulatory, and security objectives.
- Identify opportunities to improve data protection maturity and reduce organizational risk.
- Establish metrics and reporting that demonstrate program effectiveness.
- Partner with leadership to define long-term data governance and protection strategies.
Information Protection & Data Governance
- Design and maintain enterprise data classification frameworks.
- Develop and govern data handling standards and protection requirements.
- Implement and manage sensitivity labeling, encryption, and information protection controls.
- Collaborate with Data Governance teams to establish classification taxonomies and data ownership models.
- Develop automated classification and data discovery capabilities across structured and unstructured repositories.
Data Loss Prevention (DLP)
- Design, implement, and manage enterprise DLP strategies.
- Develop policies protecting sensitive information across email, collaboration platforms, endpoints, cloud applications, and remote work environments.
- Analyze incidents and adjust policies to improve effectiveness while minimizing business disruption.
- Establish operational processes for data loss investigations and response activities.
Insider Risk & Investigations
- Implement and maintain insider risk monitoring capabilities.
- Develop use cases and detection strategies for data misuse, theft, fraud, and policy violations.
- Support internal investigations involving sensitive data and policy violations.
- Partner with HR, Legal, and Compliance teams during investigations.
eDiscovery, Retention & Records Management
- Support legal hold, eDiscovery, and regulatory response processes.
- Develop data retention and disposition strategies.
- Manage records management controls supporting compliance requirements.
- Ensure defensible preservation and collection processes are established.
Compliance & Regulatory Support
- Support security, privacy, and regulatory audits.
- Map compliance requirements to implemented technical controls.
- Assist with risk assessments and remediation planning.
- Partner with Compliance and Legal teams to demonstrate regulatory adherence.
Platform Engineering & Integration
- Design and maintain enterprise data protection architectures.
- Integrate data security tools with SIEM, case management, and operational platforms.
- Onboard cloud, SaaS, endpoint, and on-premises data sources.
- Develop automation and operational efficiencies using scripting and APIs.
- Manage tool upgrades, enhancements, health monitoring, and operational support.
WHAT YOU NEED TO APPLY:
- 7+ years of information security experience.
- 5+ years of hands-on experience supporting enterprise data protection initiatives.
- Experience administering one or more enterprise data protection, governance, or compliance platforms.
- Experience implementing DLP, information protection, data classification, and compliance solutions.
- Experience working with Legal, Compliance, Privacy, and Audit functions.
- Experience leading enterprise-scale security initiatives and projects.
- Authorization to work in the United States without current or future sponsorship (U.S. citizen or lawful permanent resident).
Technical Skills
Strong experience in several of the following areas:
- Data Protection Programs
- Data Governance
- Data Classification
- Information Protection
- Sensitivity Labels
- Encryption Technologies
- Data Loss Prevention (DLP)
- Insider Risk Management
- Communication Compliance
- Records Management
- Data Lifecycle Management
- eDiscovery
- Data Security Posture Management (DSPM)
- Cloud Security
- Identity and Access Management (IAM)
- Role-Based Access Control (RBAC)
- Microsoft 365 Security
- Endpoint Security
- Enterprise Security Architecture
- Security Monitoring and SIEM Integration
- Security Automation and Scripting
- Compliance Frameworks (NIST, ISO 27001, CIS, PCI-DSS, HIPAA, GDPR, SOX)
CAREER DEVELOPMENT:
It’s not just a job, it’s a career, and we are here to support you every step of the way. We want you to be successful and fulfilled. Through on-the-job experiences, personalized coaching and our robust learning and development programs, we encourage you – at every level – to grow and develop.
BENEFITS:
We offer comprehensive benefits to help you be healthy, build financial security, and balance work and home life. At The Hanover, you’ll enjoy what you do and have the support you need to succeed.
Benefits include:
- Medical, dental, vision, life, and disability insurance
- 401K with a company match
- Tuition reimbursement
- PTO
- Company paid holidays
- Flexible work arrangements
- Cultural Awareness Day in support of IDE
- On-site medical/wellness center (Worcester only)
- Click here for the full list of Benefits
EEO statement:
The Hanover values diversity in the workplace and among our customers. The company provides equal opportunity for employment and promotion to all qualified employees and applicants on the basis of experience, training, education, and ability to do the available work without regard to race, religion, color, age, sex/gender, sexual orientation, national origin, gender identity, disability, marital status, veteran status, genetic information, ancestry or any other status protected by law.
Furthermore, The Hanover Insurance Group is committed to providing an equal opportunity workplace that is free of discrimination and harassment based on national origin, race, color, religion, gender, ancestry, age, sexual orientation, gender identity, disability, marital status, veteran status, genetic information or any other status protected by law.”
As an equal opportunity employer, Hanover does not discriminate against qualified individuals with disabilities. Individuals with disabilities who wish to request a reasonable accommodation to participate in the job application or interview process, or to perform essential job functions, should contact us at:[email protected] and include the link of the job posting in which you are interested.
Privacy Policy:
To view our privacy policy and online privacy statement, click here.
Applicants who are California residents: To see the types of information we may collect from applicants and employees and how we use it, please click here.
Compensation:
The target hiring range for this role may vary based on geographic location and other factors, including merit or performance, demonstrated proficiency, skills for the role, education, travel requirements, and experience. Additional compensation may include an annual bonus (which could take the form of a general bonus, sales incentive, or short-term incentive), long-term incentive or spot recognition awards. The posted range reflects our ability to hire at different position titles and levels depending on background and experience.
Skills Required
- 7+ years of information security experience
- 5+ years of hands-on experience supporting enterprise data protection initiatives
- Experience administering enterprise data protection, governance, or compliance platforms
- Experience implementing DLP, information protection, data classification, and compliance solutions
- Experience working with Legal, Compliance, Privacy, and Audit functions
- Experience leading enterprise-scale security initiatives and projects
- Authorization to work in the United States without current or future sponsorship; U.S. citizen or lawful permanent resident
- Strong experience in several data protection, governance, classification, information protection, DLP, insider risk, records management, eDiscovery, DSPM, cloud security, IAM, RBAC, Microsoft 365 Security, endpoint security, SIEM integration, or security automation areas
- Knowledge of compliance frameworks including NIST, ISO 27001, CIS, PCI-DSS, HIPAA, GDPR, or SOX
The Hanover Insurance Group Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about The Hanover Insurance Group and has not been reviewed or approved by The Hanover Insurance Group.
-
Healthcare Strength — Healthcare coverage is positioned as robust, spanning medical, dental, vision, life and disability options, alongside wellness supports like coaching and assistance programs. Access to added services such as health advocacy, flu shots, and location-specific on-site clinics appears to strengthen the overall package.
-
Retirement Support — Retirement benefits are described as strong, highlighted by a 401(k) match up to 6% and additional financial programs like profit sharing/pension options in some descriptions. An employee stock purchase discount and free financial planning are also presented as meaningful financial-security add-ons.
-
Leave & Time Off Breadth — Time-off benefits appear generous, with four weeks of PTO at hire, multiple holidays, and the ability to purchase additional PTO. Hybrid/flexible work arrangements are frequently presented as enhancing the overall value of total rewards.
The Hanover Insurance Group Insights
Similar Jobs
What We Do
The Hanover is a leading provider of property and casualty insurance in the United States. We’ve been named to Forbes’ list of “Best Mid-Size Employers” since 2015, and have more than 4,200 employees in 35 branch offices, covering more than two million individual and business policyholders. As an employer of choice, The Hanover provides a unique experience, combining a long, proud history of delivering its promises, and a forward-thinking, innovative culture mentality. At The Hanover, you will gain new experiences, expand your skill set, and build your career working for an industry leader and one of the fastest growing companies in the insurance industry. Our compensation and benefits programs are based on the strong belief that our people are our company's most valuable asset. We offer comprehensive benefits to help our team members stay healthy, build financial security, balance work and personal responsibilities, and achieve their professional goals.
