Data Security Engineer

Description

**Job Description**:
At Kenvue, we believe there is extraordinary power in everyday care. Built on over a century of heritage and propelled forward by science, our iconic brands—including NEUTROGENA®, AVEENO®, TYLENOL®, LISTERINE®, JOHNSON’S® and BAND-AID® —are category leaders trusted by millions of consumers who use our products to improve their daily lives. Our employees share a digital-first mindset, an approach to innovation grounded in deep human insights, and a commitment to continually earning a place for our products in consumers’ hearts and homes. This role will be within our Cyber organization, working at the intersection of business strategy, data engineering and cybersecurity technology products. It could be office-based or remote in India with a capability to overlap at least 3 hours into Skillman, NJ business day.

The Kenvue Cyber organization is currently seeking a highly skilled and motivated Data Security Engineer to join our team and play a pivotal role in safeguarding our organization against cyber threats as well as our company’s sensitive data in storage systems, collaboration platforms and business process systems. Your responsibilities encompass the design, implementation, and maintenance of security measures to protect data at rest and in transit. You will work collaboratively with cross-functional teams to ensure data security best practices, compliance, and the implementation of Data Loss Prevention (DLP) measures. If you are enthusiastic about defending against cyber threats and want to be part of a dynamic and innovative company, we want to hear from you.

**Specific responsibilities**:

- Design, implement and manage data security measures on end user and business process systems.
- Establish and enforce data access controls, user permissions, and least privilege principles to limit access to authorized personnel.
- Implement and manage encryption technologies to protect data at rest and in transit.
- Deploy and manage DLP solutions to prevent unauthorized data leakage and monitor data flows.
- Ensure compliance with relevant data security regulations, such as HIPAA, NIST, and industry standards like ISO 2700 Series.
- Develop and practice an incident response plan for data related security incidents.
- Maintain accurate documentation of data classifications, security policies, and incident response procedures.
- Develop and maintain documentation to empower and educate the users, data custodians and IT administrators to manage company data per policies, procedures, and best practices.
- Provide training and guidance to data users and administrators on security best practices, compliance requirements, and DLP policies.
- Conduct regular security audits and assessments of data to identify and rectify security issues.
- Collaborate with IT administrators Implement robust data backup and recovery procedures to safeguard data and enable rapid restoration in case of data loss.
- Stay updated on the latest data security threats, vulnerabilities, and DLP best practices and adapt security measures accordingly.

**Qualifications - Required**
- A bachelor’s degree or equivalent by track-record of successful enterprise experience. Graduate degree preferred.
- 3+ years of broad IT infrastructure experience with 2+ years of end user security experience in a multi-platform, multi-vendor environment.
- Strong leadership presence, influencing, collaboration, communication information-sharing and organizational skills.
- Experience working in an outcomes-focused Product (vs Project Management) delivery mindset and experience with Agile software development approaches.
- Proven track record of innovation and continuous improvement.
- Ability to work in fast paced environment and prioritize in parallel.
- Customer service orientation, eye for business value, and a bias for action.
- Expert at working with virtual, and diverse global teams of varied backgrounds and cultural experiences.
- Exercises independent judgment, strong decision making and problem solving for key processes.
- Experience with API based integration of antimalware and other security capabilities with SIEM.
- Experience with Zero Trust architecture
- Deploy and manage DLP solutions to prevent unauthorized data leakage and monitor data flows like Microsoft Purview. PowerShell experience is preferred.
- Experience with ticketing tool JIRA/ Service now.
- Qualifications - Preferred
- Certifications in security and data engineering
- Experience within regulated environments (GxP or SOx)

**Qualifications**:
**Qualifications - Required**
- A bachelor’s degree or equivalent by track-record of successful enterprise experience. Graduate degree preferred.
- 3+ years of broad IT infrastructure experience with 2+ years of end user security experience in a multi-platform, multi-vendor environment.
- Strong leadership presence, influencing, collaboration, communication information-sharing and organizational