EY—GMS-Staff-SEG-DAG

Job description

Description: At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. CMS-TDR – Staff (SEG,DAG - Proofpoint and Microsoft, Varonis) Job Summary Looking for 2+ years experienced professional to manage Secure Email Gateway (SEG) operations and Data access governance (DAG) Key Responsibilities - Administer, monitor, and optimize Secure Email Gateway (SEG) solutions, primarily Proofpoint and Microsoft Defender for Office 365 / Exchange Online Protection (EOP). - Manage email security policies related to anti-phishing, anti-spam, malware protection, URL defense, attachment sandboxing, and email encryption. - Investigate and respond to email security incidents, threats, and user-reported phishing campaigns. - Configure and maintain Varonis Data Security Platform for data access governance, permission analysis, and sensitive data monitoring. - Conduct data access reviews, entitlement analysis, and remediation of excessive or inappropriate permissions. - Monitor and investigate anomalous file access, insider threat indicators, and data exfiltration risks using Varonis. - Develop reports, dashboards, and compliance evidence related to email security and data governance controls. - Collaborate with SOC, IAM, Infrastructure, and Business teams to strengthen security posture and meet compliance requirements. - Support security audits, risk assessments, and governance initiatives. Required Skills - 2+ years of experience in Cybersecurity, Email Security, or Data Security domains. Hands-on experience with: - Proofpoint Email Protection - Microsoft Defender for Office 365 / Exchange Online Protection (EOP) - Varonis Data Security Platform - Strong understanding of phishing, malware, email authentication protocols (SPF, DKIM, DMARC), and email threat protection. - Experience in data access governance, file permission management, and data classification. - Knowledge of security operations, incident response, and SIEM integration. - Strong troubleshooting, analytical, and stakeholder management skills. Preferred Qualifications - Certifications such as SC-200, SC-300, MS-102, Proofpoint Certified Professional (PCP), Varonis Administrator, or equivalent. - Experience in enterprise environments with Microsoft 365 and hybrid infrastructures. - Familiarity with compliance frameworks such as ISO 27001, NIST, GDPR, and regulatory data protection requirements. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.