Data Security Posture Management (DSPM) Lead – Manager (Poznań - hybrid)

Responsibilities

• Sensitive Data Discovery & Classification:
• • Lead automated discovery of sensitive and regulated data across cloud platforms, SaaS, databases, and on prem systems, as described in DSPM core components.
• Ensure classification and tagging of PII, PHI, financial, client, and regulated data based on policy and regulatory requirements.
• Risk Assessment & Exposure Analysis
• • Continuously assess data exposure risks, excessive permissions, and misconfigurations across environments.
• Evaluate compliance alignment with ISO 27001, NIST 800‑53, GDPR, HIPAA, SOX, and internal standards.
• Data Security Controls & Remediation
• • Collaborate with Identity & Access Management to enforce least‑privilege access and remove excessive permissions.
• Recommend and implement security controls such as encryption, masking, tokenization, and DLP policies.
• • Work with platform and application teams to remediate identified data security gaps.
• Monitoring & Reporting
• • Provide continuous monitoring of data access patterns, anomalies, and compliance posture across hybrid environments.
• Deliver automated reporting to Security, Compliance, IT Leadership, and audit stakeholders.
• Track and report metrics related to risk reduction, compliance, and overall data security posture.
• Policy Alignment & Governance Collaboration
• • Ensure alignment between DSPM strategy and the firm’s Data Lifecycle Management (DLM) and Data Governance programs.
• • Support the development and enforcement of data‑centric security policies, standards, and operating procedures.
• • Work with Data Owners and Stewards to validate classification requirements and ensure ongoing data protection across the lifecycle.
• Tool & Technology Enablement
• • Partner with GTech and Enterprise Architecture to ensure integrations align with global DSPM frameworks and strategy.
• • Experience with DSPM vendor solutions (e.g., Veronis, Proofpoint, Cyberhaven) based on business needs and risk posture.
• Cross‑Functional Incident Response Support
• • Support escalations for data‑related security incidents in coordination with Legal, Compliance, GTech, and Business units.
• • Participate in investigations involving data leakage, unauthorized access, or policy violations.

What we offer:

• Hybrid working model (2 days in the office and 3 days working remotely).
• Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform.
• Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world.
• A culture based on teamwork, trust, and knowledge sharing.
• A well-structured onboarding program to support a smooth start and successful integration into your new role.
• Clear career development paths and access to learning and certification programs.
• Access to training platforms and tools that support professional growth.
• An inclusive workplace that welcomes people with disabilities.
• A modern office in Poznań, located in Malta Office Park.