Principal DLP Engineer (MS Purview)

Location: Hybrid – 3 days onsite in one of the following hubs: Johnston, RI | Phoenix, AZ | Westwood or Medford, MA | Plano, TX | Iselin, NJ | Pittsburgh, PA | Franklin, TN | Cleveland, OH | Chicago, IL

Schedule: Monday–Friday | 40 hours/week About the Role

Citizens Bank is seeking a Principal DLP Engineer to lead our efforts in protecting sensitive data in motion across the enterprise. This role will serve as the technical lead and experience owner for data loss prevention (DLP) initiatives, with a focus on architecture, automation, and regulatory compliance. You’ll work cross-functionally to design and implement scalable DLP solutions that align with business goals and evolving security needs. Key Responsibilities Architect, implement, and manage enterprise-grade DLP solutions to protect sensitive data in motion. Lead DLP migration and modernization efforts, ensuring minimal disruption to business operations. Collaborate with security, infrastructure, and business teams to define data protection strategies. Provide Tier 3 support for complex DLP incidents and drive timely resolution. Automate DLP operations to ensure high availability and operational efficiency. Conduct regular audits and assessments of DLP policies to ensure compliance with industry standards and regulations. Stay current with emerging trends in data protection, DLP technologies, and regulatory requirements. Develop and maintain technical documentation, policies, and procedures. Provide training and guidance to internal teams on DLP tools and best practices. Integrate DLP solutions with broader security infrastructure and cloud environments.

Required Qualifications Proven hands-on experience with multiple DLP platforms (., Microsoft Purview, Symantec, Forcepoint, . Strong background in DLP architecture design and solution migration. Deep understanding of data protection regulations (., GDPR, HIPAA, CCPA). Experience with incident response and risk management related to data breaches. Proficiency in configuring and managing DLP policies, rules, and workflows. Familiarity with data classification, encryption, and cloud-based security controls. Strong analytical, problem-solving, and communication skills. Preferred Qualifications Experience with automation tools and scripting for DLP operations. Relevant certifications such as CISSP, CISM, or equivalent. Experience integrating DLP with SaaS platforms and public cloud environments.

Education Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Pay Transparency The salary range for this position is $145,000-170,000 per year plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience. We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of very local and state jurisdiction in the United States. For an overview of our benefits, visit . #LI-Citizens1