EY - Cybersecurity - Data Protection and Information Protection - Manager

Location

Kochi

Other locations

Anywhere in Country

Salary

Competitive

Date

Sep 28, 2026

Job description

Requisition ID

1746186

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY – Cybersecurity Manager, Data Protection & Information Protection

Overview

As a Manager in EY’s Cybersecurity practice, you will play a key role in delivering Data Protection, Information Governance, and Insider Risk Management services across multiple client environments. We are seeking cybersecurity professionals with expertise in enterprise Data Loss Prevention and Information Protection platforms, including Microsoft Purview, Forcepoint DLP, or equivalent technologies, covering data classification and sensitivity labelling capabilities.

The role involves implementing, administering, and optimizing enterprise data protection controls to safeguard sensitive information across endpoints, email, collaboration platforms, cloud services, and business applications. The successful candidate will work closely with business, compliance, legal, and security teams to support data governance, regulatory compliance, and information protection initiatives.

The Opportunity

We are seeking cybersecurity professionals with 12+ years of experience in Data Protection, Data Loss Prevention, Information Protection, Compliance, Data Governance, or Cybersecurity Consulting.

The ideal candidate will possess strong technical expertise in data classification, sensitivity labelling, DLP policy implementation, information governance, regulatory compliance, and enterprise data protection and security technologies.

Key Responsibilities

Data Loss Prevention

Deploy, configure, and administer enterprise Data Loss Prevention solutions such as Microsoft Purview DLP, Forcepoint DLP, or equivalent technologies.

Design and implement DLP policies across enterprise email, collaboration, cloud, endpoint, and productivity services, including Microsoft 365 services such as Exchange Online, SharePoint Online, OneDrive, Teams, and endpoints.

Configure detection rules for sensitive information types, keywords, document fingerprints, and custom classifiers.

Monitor DLP alerts, incidents, and policy violations.

Investigate data leakage events and support incident response activities.

Implement risk-based controls to prevent unauthorized sharing, transfer, or exposure of sensitive information.

Tune DLP policies to improve detection accuracy and reduce false positives.

Support regulatory compliance requirements through appropriate policy implementation and reporting.

Generate operational, risk, and compliance reports for stakeholders.

Data Classification & Labelling

Implement and administer enterprise sensitivity labels, classification policies, and information protection controls using Microsoft Purview or equivalent technologies.

Design and maintain enterprise data classification frameworks.

Configure automatic, recommended, and manual labelling strategies.

Implement data protection capabilities, including encryption, content marking, access restrictions, and usage controls.

Integrate information protection controls across enterprise collaboration, productivity, cloud, and information management workloads.

Support secure data sharing and collaboration initiatives.

Perform classification reviews and improve data governance controls.

Work with business stakeholders to identify and classify sensitive business information.

Data Encryption Management

Implement, administer, and support enterprise data encryption solutions such as IBM Guardium Data Encryption, Thales CipherTrust, or equivalent technologies across enterprise environments.

Configure and manage encryption policies for structured and unstructured data.

Support encryption deployments across on-premises, cloud, and hybrid environments.

Monitor encryption controls and ensure continuous protection of business-critical data.

Troubleshoot encryption-related issues and support operational activities.

Manage cryptographic key lifecycle processes, including generation, distribution, storage, rotation, archival, and destruction.

Administer enterprise key management systems and encryption key repositories.

Support encryption key governance and access controls.

Implement separation-of-duty principles for key management operations.

Cryptographic Security & Data Protection

Implement encryption controls for data at rest, data in transit, and data in use, where applicable.

Support database, application, file-level, and storage-level encryption initiatives.

Implement and maintain TLS/SSL security controls and certificate management processes.

Support Public Key Infrastructure integration and management activities.

Evaluate cryptographic configurations and identify security weaknesses.

Support secure data-sharing and information protection initiatives.

Assist in the implementation of tokenization, masking, and encryption-based data protection controls.

Information Protection Governance

Develop and maintain data classification standards and governance procedures.

Conduct data discovery and information protection assessments.

Support the implementation of information handling requirements aligned with organizational policies.

Collaborate with legal, compliance, privacy, and risk teams on data protection initiatives.

Support audit activities and compliance assessments.

Assist in defining information protection roadmaps and maturity improvement plans.

Provide recommendations for strengthening enterprise data protection controls.

Skills and Attributes for Success

Strong understanding of Data Loss Prevention and Information Protection concepts.

Experience wi