Senior Information Security Engineer (DLP)

The candidate needs to have 5-8 years' experience with deploying and maintaining security software agents and providing end-user support, as well as configuring data loss protection policies that monitor and prevent unauthorized transmission of digital information in a globally distributed environment.

As our Senior Information Security Engineer within Insider Threat, you will use extensive knowledge of international standards, industry best practices, professional experience, collaboration, and good judgment to implement an information security strategic roadmap focused on monitoring and protecting Nike's most sensitive digital information.

Responsibilities:

• Identify and implement technical controls to mitigate unauthorized access or disclosure of Nike's most sensitive digital assets.
• Test, deploy, and maintain data loss prevention tools, including coordination of troubleshooting between end users and vendor partners to mitigate performance impacts and disruptions.
• Assess risk and translate to business-relevant considerations and facts; create risk mitigation strategies in collaboration with partner teams.
• Develop, document, and execute policies, standards, procedures, and other best practices using exceptional oral and written communication, good judgement, and subject matter expertise.

Requirements:

• 5- 7 years of demonstrated relevant experience and security expertise in implementing, deploying, and supporting secure solutions and services for a mix of the following areas: Enterprise Data Loss Prevention, including SaaS-based DLP and agent-based DLP capabilities, CASB solutions (API-based and inline), Workstation Operating Systems (Windows / MacOS), Enterprise Digital Rights Management, Office 365 security suite, and Enterprise Device Management.
• Excellent communication, balancing details and context and demonstrating good judgement with timely updates, risks, and opportunities.
• Must be trustworthy in keeping sensitive data confidential.
• The following certifications are desirable but not required: CISSP, CISM, and ITPM.