Security Engineer

Company Background

Established in 1928, Genuine Parts Company is a leading global service provider of automotive and industrial replacement parts and value-added solutions. Our Automotive Parts Group operates across the U.S., Canada, Mexico, Australasia, France, the U.K., Ireland, Germany, Poland, the Netherlands, Belgium, Spain and Portugal, while our Industrial Parts Group serves customers in the U.S., Canada, Mexico and Australasia. We keep the world moving with a vast network of over 10,700 locations spanning 17 countries supported by more than 63,000 teammates. Learn more at

Position Purpose

The GPC Global Technology Center team works on a wide range of projects assisting in areas such as e-commerce and data platforms, supply chain solutions, selling systems, and cyber security. This is home to a team of highly skilled IT engineers who are dedicated to driving innovation and delivering cutting-edge solutions for GPC. Genuine Parts Company, a leader in the automotive and industrial parts sector, is dedicated to ensuring quality and reliability at all levels.

As we continue to scale and evolve, it has become increasingly critical for us to protect our data assets against both external and internal threats. As such, we're seeking an experienced Data Protection Engineer to join our IT security team and champion our data protection, insider threat management, and data classification endeavors.

Responsibilities

Data Protection

• Design, implement, and maintain data protection solutions that safeguard the company's sensitive and critical data.
• Integrate and manage Data Loss Prevention (DLP) solutions to monitor and control data transferring across the company's computer network.
• Collaborate with cross-functional teams to develop a data protection framework and strategy, ensuring the security of data throughout its lifecycle.

Insider Threat Management

• Implement and maintain tools that detect, alert, and respond to suspicious or malicious activities that can result in data exfiltration or compromise.
• Regularly review and analyze system logs, access logs, and user activity to detect potential insider threats.
• Work closely with HR, legal, and other departments to establish procedures and policies for addressing potential insider threats.

Data Discovery & Classification

• Drive the deployment and management of data discovery tools across both structured and unstructured data sources.
• Collaborate with business units to accurately classify data based on its sensitivity and criticality.
• Define and maintain policies and procedures for consistent data classification and labeling.

Mobile Device Management (MDM)

• Lead the implementation and management of MDM solutions to ensure the security of company data on mobile devices.
• Define and enforce policies for device use, encryption, remote wipe, and other relevant security controls.
• Regularly assess the risk posture of mobile devices and recommend enhancements to the MDM strategy.

Continuous Improvement

• Stay abreast of industry trends, emerging threats, and best practices in data protection.
• Regularly review and update data protection policies, procedures, and technologies to address the evolving threat landscape.

Requirements

• Bachelor's degree in computer science, Information Technology, or related field. Advanced degrees or certifications (e.g., CISSP, CISM, CDPSE) will be advantageous.
• Minimum of 3 years of experience in data protection and security.
• Demonstrated expertise in insider threat management and data classification.
• Proven experience with MDM solutions and strategies.
• Strong analytical and problem-solving abilities.
• Excellent communication and collaboration skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
• Familiarity with tools such as MS Purview, Code42, OneTrust, and Varonis would be a plus

Location

Krakow/Hybrid