Data Protection & Privacy Engineer

Argo Group is a leader in specialty insurance with a vibrant culture built on respect, equality, wellness and opportunity. We’re an innovative organization that’s small enough to be agile and big enough to make a difference in our industry.  

Our flexible workplace is continuously evolving to ensure all employees feel: 

• Comfortable bringing their whole selves to work. 
• Confident that they will be treated respectfully. 
• Recognized for their performance and provided with equal opportunities to succeed. 

At Argo, skill meets opportunity. If you’re wired to raise your hand and ask, “Where can I help?”, you’ll thrive with us. 

The Data Protection Engineer manages the day-to-day maintenance and operation of Information Security Systems to ensure that controls are adequate and effective. This position also analyzes scenarios, provides solutions, and makes recommendations to protect the environment, customers, and employees of Argo Group.

Primary Responsibilities

• Creates new ways to solve existing data protection and security issues
• Liaising with internal stakeholders and outsourced IT service providers on data protection matters
• Investigates intrusion incidents, conducts forensic investigations, and mounts incident responses
• Evaluates new technologies and processes that enhance security capabilities
• Establishes plans and protocols to protect data and information systems against unauthorized access, modification, and/or destruction
• Delivers technical reports on daily activities
• Analyzes and advises on new security technologies and program conformance
• Maintains knowledge with current emerging technologies and advancements within Information Security
• Takes initiative and responsibility for achieving desired results
• This position is responsible for coordinating efforts with DLP engineering and escalations for Cyber investigations.
• This position will provide incident and policy analysis for existing controls and help drive expansion for greater data visibility and loss prevention technologies in the information security environment.
• Develop a firm grasp on data loss protection concepts and incident analysis and be able to relay findings as needed.
• Knowledge of data classification solutions
• Knowledge of cryptographic implementations at media, file, and application levels
• Experience with metadata management and data tagging and creating custom data analytics for data security
• Experienced working in an outsourced IT environment

Skills and Competencies

• Strong organizational, research, analytical and/or problem-solving skills to evaluate situations, make recommendations, and take effective action
• Ability to articulate complex technical concepts or scenarios to both technical and non-technical audiences
• Subject Matter Expert (SME) in one or more security domains

What’s required for the position:

• 5 years’ Experience working with highly sensitive and confidential information and projects with a minimum of 3 years of security-related experience in a global role.
• Excellent organizational skills and ability to operate and communicate effectively while meeting multiple deadlines and completing projects simultaneously.
• Ability to analyze information and construct an action plan tailored to resolve issues effectively and cooperatively.
• Experience reviewing, interpreting, and providing guidance on regulatory rules and standards.
• Ability to read and comprehend complex terminology and procedures in order to provide thorough and accurate guidance and assessments.
• Knowledge of compliance, international, federal and state laws, regulations, and guidance related to information privacy and security and compliance.
• Ability to analyze and communicate complicated regulations and requirements to individuals at all levels of the organization.
• Working knowledge of global privacy and information security laws and regulations (including CCPA, GDPR, GLBA, and HIPAA) that aligns with data processing operations and level of data protection required for the personal data processed by data controllers and data processors.
• 3+ years of experience in a security, compliance, risk and/or privacy-related role with quality management experience in data protection, data policy, privacy claims, and information security compliance.
• PCI ISA/QSA, CISA, CISM, CISSP, CIPP, or equivalent
• Demonstrated ability to use superior judgment and discretion in dealing with sensitive and confidential information.
• Working knowledge of ISO 27001, PCI, HIPAA