DSPM Implementations Engineer

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

We’re seeking a data protection professional to build and mature Data Security Posture Management (DSPM) capabilities, with supporting Data Loss Prevention (DLP) expertise. You’ll work with security, privacy, data governance, and IT stakeholders to understand how sensitive data is handled, establish practical governance, and improve how it is discovered, classified, monitored, and protected across SaaS, cloud, and other environments.

This role is primarily focused on DSPM program development and implementation, including stakeholder engagement, data classification and tagging, policy tuning, and integrations. It also requires hands-on experience with DLP controls and their role in a broader data protection program.

Work You’ll Do

As a Delivery Center, DPSM Implementations Engineer on the Digital Trust and Privacy team, you will be responsible for…

• Build and mature a Data Security Posture Management (DSPM) program, including governance, an operating model, processes, and measures of effectiveness.
• Partner with security, privacy, data governance, IT, and data owners to assess data ownership, business context, protection needs, and remediation priorities.
• Discover and assess sensitive data across software-as-a-service (SaaS) applications, cloud environments, and other data stores; define and apply data classification and tagging approaches.
• Configure and tune DSPM rules, policies, and risk findings; integrate DSPM capabilities with SaaS platforms, cloud environments, identity and access controls, DLP tools, and security operations workflows.
• Translate DSPM findings into prioritized remediation plans; design, implement, and tune DLP controls across endpoint, email, web, and cloud channels.
• Develop program documentation, operating procedures, and stakeholder reporting; support audit and compliance evidence requests.

The Team

Deloitte’s Government & Public Services (GPS) practice – our people, ideas, technology and outcomes – is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Digital Trust & Privacy offering enables trust and safety of online communications and digital products, protecting users, consumers, and patients from harm. Enables clients to provide consumer confidence in knowing with whom they are dealing and ensuring the integrity of access to data.

This opportunity sits within our Deloitte US Delivery Center model, which is dedicated to driving impactful business services. It leverages Deloitte’s scale and talent, as well as a center delivery model to provide high-quality, cost-effective service with standardized processes and procedures to service businesses across Deloitte.

The Deloitte US Delivery Center has a small-business feel with a big-business impact. With the resources of Deloitte and a community feel, the delivery center model provides high-quality services to our clients. USDC professionals work out of one of our specific delivery center locations, and each location presents dynamic career opportunities for professionals to focus on their work with nominal travel requirements.

Qualifications

Required: 

• Bachelor's degree and 3+ years of cybersecurity experience, including experience implementing DSPM and DLP capabilities.
• Experience establishing or expanding a Data Security Posture Management (DSPM) program, including governance, operating models, processes, and measures of effectiveness.
• Experience configuring Data Security Posture Management platforms, such as Cyera, Varonis, Netskope DSPM, or BigID; applying data classification and tagging; tuning DSPM rules or policies; and integrating capabilities with SaaS applications, cloud environments, identity and access controls, and security operations workflows.
• Experience designing, implementing, and tuning Data Loss Prevention (DLP) controls across endpoint, email, web, and cloud channels using Microsoft Purview, Forcepoint, Symantec, Digital Guardian, Netskope, or Zscaler.
• You must reside within a commutable distance of your assigned office with the ability to commute daily, if required, without the need for overnight accommodations.
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Delivery Center Location & Travel Requirements:
  
  • Hybrid Work Model: Operate under a hybrid system requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia)
  • Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location
  • Travel Requirement: Maximum of 10% overnight travel for client or project purposes
  • Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance

Preferred:

• Experience developing or operating data governance, privacy, or security operating models.
• Experience applying National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53), Criminal Justice Information Services (CJIS), Internal Revenue Service Publication 1075, or Health Insurance Portability and Accountability Act (HIPAA) requirements to data protection controls.
• Experience integrating DSPM or DLP with Security Information and Event Management (SIEM) or Security Orchestration, Automation, and Response (SOAR) platforms.
• Certified Information Systems Security Professional (CISSP), CompTIA Security+, Certified Information Security Manager (CISM), or SC-401 certification.
• Experience using PowerShell or Python for automation and reporting.

For individuals assigned and/or hired to work in Nashville, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Nashville and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $135,000 to $150,000.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html