Job Description

The Information Security Engineer will be a part of the enterprise Data Security and Governance, Risk, & Compliance program with focus on developing and scaling data security controls, insider risk management, AI-adoption, and cyber-automation.

The applicant will have prior hands-on technical experience with engineering, testing, and deploying data security and loss prevention controls in a complex enterprise environment. Additional position requirements include the ability to classify data, accurately deploying and tuning labels, triaging alerts, risk assessing AI technologies, and training staff on data security best practices.

The candidate must be a self-starter with the motivation to learn and contribute to new technologies and processes, remain flexible to shifting priorities while being organized and able to work across functional teams. The ideal candidate will also be able to operate independently while successfully executing on all assignments.

The ability to verbally present ideas clearly and thoughtfully to large audiences at different levels of the organization is required.

This is a hybrid position which will require the candidate to work on-site in Hunt Valley Maryland several times per week.

Responsibilities:

Process & Execution

• Test, deploy, and integrate Data Security solutions including Data Loss Prevention (DLP), labels, policies, and alert strategies.
• Respond to Data Loss Prevention (DLP) alerts while proactively providing education on data security principles to Sinclair's end-user base.
• Research and risk assess Artificial Intelligence (AI) applications to determine the risk and impact to data privacy.
• Support Sinclair's overall mission of AI adoption including helping with the deployment of AI functionality including Role Based Access Controls, Agent governance, and third-party AI usage.
• Support Sinclair's cyber risk program through the coordination of policy exceptions with stakeholders, updating the risk registry, and co-developing remediation plans.
• Contributes to the development of information security policies, standards, and processes to enforce Sinclair compliance requirements.
• Deliver current and relevant training content to personnel to ensure data is handled and transmitted according to policies and standards.
• Provide quality and timely updates to internal customers to ensure clear expectations are met for their requests.
• Collaborate with peers to create and enhance weekly metrics to measure the effectiveness of the security program.
• Maintain ownership of assignments initiatives while maintaining a high level of personal accountability.
• Develop and communicate risk mitigation plans for security risks in SaaS applications including data exposures, integrations, and miscategorized data labels.

Collaboration & Partnerships

• Apply excellent communication skills to efficiently collaborate with company stakeholders and business partners.
• Evaluate and recommend new products, maintain knowledge of emerging technologies, and maximize value from existing tool sets to ensure return on investment.
• Demonstrate strong problem-solving skills by identifying gaps or issues and develop engineering
• Communicate Sinclair policy and standards requirements to the organization to ensure compliance is being met.
• Promptly and proactively respond to information security tickets and other requests while effectively communicating with your team and customers.

Performance Improvement

• Flourish within an environment where priorities are frequently adjusted and the ability to multitask comes as second nature.
• Maintain a high-level of work quality while operating comfortably in a fast-paced environment and culture that emphasizes the importance of effective communication.
• Proactively and effectively look for ways to improve and optimize processes including automation and safe AI integration.

Keys to Success:

• Be a self-starter
• Be willing to go the extra mile
• Over communicate
• Remain flexible and resilient
• Have a good attitude
• Be a team player
• Have a desire to learn
• Ability to multitask
• Willingness and ability to automate manual tasks

Qualifications- Must Haves

• Bachelor's degree in an IT or cybersecurity discipline with 4 years of Information Security experience or 6 years of experience in lieu of a degree.
• Exceptional verbal and written communication skills with an ability to present complex information to audiences of varying subject knowledge.
• Minimum of two years' experience with data loss prevention technologies and successfully labeling data.
• Experience deploying and configuring enterprise security tools focused on Data Loss Prevention and Insider Risk Management (MS Purview DSPM, DSPM for AI, Varonis, Zscaler).
• Prior experience classifying data and understanding the principles of advanced data protection.
• Prior hands-on experience with prompt engineering successfully creating custom GPTs to automate or streamline processes.
• Ability to verbally describe and address risks associated with Artificial Intelligence adoption.
• Knowledge of multi-cloud environments.
• An industry certification that displays commitment to your career and craft.
• Experience working in the commercial sector for a large enterprise environment.
• Prior experience with Insider Risk Management programs, developing monitoring strategies, and delivering meaningful metrics.
• Prior experience with automation tools such as Tines, Torq, or other orchestration solutions.
• Experience developing and customizing metrics including MS Excel, Power BI, Power Automate, etc.
• Familiarity with security assessments and compliance requirements frameworks (SOC-2, NIST "800 series", ISO, CSF, SOX, etc.).
• Prior experience in the broadcast/media entertainment industries preferred.

Qualifications - Preferred

• Experience working in the commercial sector for a large enterprise environment.
• Prior experience with Insider Risk Management programs, developing monitoring strategies, and delivering meaningful metrics.
• Prior experience with automation tools such as Tines, Torq, or other orchestration solutions.
• Experience developing and customizing metrics including MS Excel, Power BI, Power Automate, etc.
• Familiarity with security assessments and compliance requirements frameworks (SOC-2, NIST "800 series", ISO, CSF, SOX, etc.).
• Prior experience in the broadcast/media entertainment industries preferred.

Please note that this position is not eligible for visa sponsorship, including employer sponsorship for an H-1B visa, OPT-STEM employment, etc.

The base salary compensation range for this role is $85,000to $112,500. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills, certifications, and geographic location. Full time positions are eligible for benefits that include participation in a retirement plan, life and disability insurance, health, dental and vision plans, flexible spending accounts, 15 paid vacation days, 2 paid personal days, 9 paid holidays, 40 hours of paid sick leave, parental leave, and employee stock purchase plan.