Security Specialist - Data Protection

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success.

As a Security Specialist within PNC's Technology organization, you will be based in Pittsburgh, PA, .Strongsville, OH, Dallas, TX, Birmingham, AL, Denver, CO, Phoenix, AZ.

We are seeking an experienced Senior Data Protection Engineer / Analyst to join our Enterprise Data Protection team. This role will be responsible for designing, implementing, monitoring, and continuously improving data protection controls across the organization. The ideal candidate will possess deep expertise in Data Loss Prevention (DLP), insider threat investigations, data discovery, classification, and governance, with hands-on experience in both Symantec DLP and Microsoft Purview environments.

Design, implement, and maintain enterprise Data Loss Prevention (DLP) controls and policies.

Administer and support Symantec DLP and Microsoft Purview Data Protection technologies.

Monitor and investigate DLP alerts, policy violations, and insider threat activities.

Perform structured and unstructured data discovery, classification, and risk assessments.

Develop and maintain data classification and labeling standards.

Configure and manage Exact Data Matching (EDM) repositories and detection rules.

Implement and optimize endpoint DLP controls across enterprise endpoints.

Collaborate with Security Operations, Risk Management, Compliance, Legal, and Human Resources teams during investigations.

Analyze data flows and identify opportunities to strengthen data protection controls.

Support data governance initiatives, regulatory compliance efforts, and risk management programs.

Develop reporting and metrics related to data protection effectiveness and program maturity.

Participate in incident response and digital investigation activities involving sensitive data exposures.

3+ years of Symantec DLP administration and engineering experience.

3+ years of Microsoft Purview experience supporting data protection and compliance capabilities.

Experience supporting Insider Threat monitoring, investigations, and remediation activities.

Experience performing structured and unstructured data scanning and discovery.

Experience protecting data across Microsoft 365, SharePoint Online, OneDrive, Teams, and Exchange Online environments.

Understanding of information protection and sensitivity labeling.

- Provides technical evaluation and analysis in a specific Security area. Supports activities, process, and tools needed to improve overall security posture of the organization. Primary responsibilities do not include Architect or Engineering responsibilities. - Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.

Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls. - Advises on more complex security procedures and products for clients, security administrators and network operations.

Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff. - Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines. - Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats.

Oversees that business needs are being met during development.

Preferred Skills Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies

Competencies Analytical Thinking, Effective Communications, Information Assurance, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Problem Solving, Software Security Assurance

Work Experience Roles at this level typically require a university / college degree, with 5+ years of industry-relevant experience. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Generally, this opening is expected to be posted for two business days from 07/01/2026, although it may be longer with business discretion.