Data Protection Analyst

Bausch + Lomb (NYSE/TSX: BLCO) is a leading global eye health company dedicated to protecting and enhancing the gift of sight for millions of people around the worldfrom the moment of birth through every phase of life. Our mission is simple, yet powerful: helping you see better, to live better.

Our comprehensive portfolio of over 400 products is fully integrated and built to serve our customers across the full spectrum of their eye health needs throughout their lives. Our iconic brand is built on the deep trust and loyalty of our customers established over our 170-year history. We have a significant global research, development, manufacturing and commercial footprint of approximately 13,000 employees and a presence in approximately 100 countries, extending our reach to billions of potential customers across the globe. We have long been associated with many of the most significant advances in eye health, and we believe we are well positioned to continue leading the advancement of eye health in the future.

**Data Protection Engineer**

**Summary**

We are seeking a skilled Data Protection Engineer to strengthen our organizations ability to protect sensitive information, maintain compliance, and defend against evolving cyber threats. In this role, you will design, implement, and manage data protection strategies, working closely with IT, Security, Compliance, and Privacy teams to ensure information is safeguarded across our digital ecosystem.

**Responsiblities**:
Design, implement, and manage data protection and data loss prevention (DLP) solutions.

Partner with Data Privacy and Compliance teams to align security controls with regulatory requirements (HIPAA, PCI, GDPR, etc.).

Investigate and respond to security incidents involving data, including forensic analysis and remediation.

Monitor and tune data protection technologies to reduce risk and improve coverage.

Develop and maintain security playbooks, policies, and procedures related to data protection.

Collaborate with IT and Security Operations teams to detect, analyze, and respond to threats targeting sensitive data.

Contribute to risk assessments, audits, and compliance reviews.

Research emerging attack methods and recommend new technologies or practices to stay ahead of threats.

Provide guidance to project teams on secure data handling, encryption, and access control.

**Qualitifications**:
4+ years of experience in data security, information protection, or cybersecurity engineering.
Hands-on experience with data classification, DLP, and cloud security tools (e.g., Microsoft Purview, Microsoft DLP, CASB).

Strong knowledge of cybersecurity principles, including encryption, access control, security architecture, and risk management.

Experience in incident detection, digital forensics, and incident response.

Understanding of compliance frameworks and regulations related to data security.

Ability to document and communicate complex technical topics clearly.

Strong problem-solving skills and a proactive mindset.

Bachelors degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience).

Industry certifications such as CISSP, CISM, CISA, GIAC, or Security+.

Prior experience working within a Security Operations Center (SOC) or Security Incident Response Team (SIRT).

**Why Join Us**

Play a critical role in protecting sensitive data and shaping enterprise security practices.

Work with a global team of security professionals on innovative technologies.

Contribute to a mission-driven organization where security and trust are top priorities.

This position may be available in the following location(s):