Join UCT and be part of the fastest-growing sector in the world! We indirectly touch every semiconductor chip that goes into every smartphone, smart car and device that uses artificial intelligence. This is a critical time for the semiconductor industry and for UCT - as technology evolves, we evolve with it. UCT is a diverse workplace where every talented employee is committed to continuous innovation, challenging the status quo and exceeding customer expectations. If you are a person with a relentless drive to succeed, a strong focus on quality with a passion for success – join us today!
UCT is looking for a talented Engineer IV, IT Infosec to join us in Philippines!
Position Overview
Be strategic and hands on. The Data Protection Team Lead is responsible for defining, implementing, and managing the organization’s enterprise data protection program leveraging Microsoft Purview. This role partners across business, legal, HR, and IT teams to establish policies, controls, and monitoring capabilities that ensure secure handling of sensitive data throughout its lifecycle. The role ensures alignment with regulatory frameworks while enhancing visibility and control over organizational data.
Key Responsibilities
Data Protection Strategy & Roadmap
- Develop and maintain the enterprise data protection strategy and multi-year roadmap leveraging Microsoft Purview capabilities.
- Define data classification, labeling, and governance standards aligned to business and regulatory requirements.
- Evaluate emerging data security technologies and continuously improve protection capabilities.
Team Leadership & Collaboration
- Collaborate with IT, Security, Legal, HR, and business units to align data protection initiatives with organizational priorities.
- Lead and mentor the Data Protection team, setting clear objectives, processes, and accountability.
Implementation & Operations
- Oversee deployment and management of Microsoft Purview capabilities including:
- Information Protection (sensitivity labels, encryption)
- Data Loss Prevention (endpoint, cloud, M365)
- Insider Risk Management and Communication Compliance
- Data Security for AI
- Establish and maintain data lifecycle and records management policies.
- Monitor data protection posture, investigate anomalies, and optimize controls.
- Define and track key metrics such as data exposure incidents, classification coverage, and policy effectiveness.
Governance & Compliance
- Ensure alignment with regulatory and compliance frameworks (NIST CSF, SOX, GDPR, etc.).
- Lead audit readiness efforts, including documentation, control validation, and remediation tracking.
- Conduct regular program reviews to ensure effectiveness and regulatory compliance.
Risk Management & Incident Response
- Identify and assess risks related to data exposure, insider threats, and improper data handling.
- Lead response efforts for data-related incidents and investigations.
- Develop mitigation strategies and drive continuous improvement of controls.
Technical Skills
- Microsoft Purview: Deep expertise in Information Protection, DLP, and Data Lifecycle Management.
- Data Protection Concepts: Strong background in data classification, encryption, and DLP strategies
- Cloud Security: Experience securing M365 environments (Exchange, SharePoint, Teams, OneDrive).
- Security Frameworks: Familiarity with NIST, CIS, IS27001, SOX, GDPR.
Soft Skills
- Strategic Thinking: Ability to define and execute long-term data protection vision.
Communication & Presentation: Effective communication with business and technical teams. Strong written and verbal skills to articulate complex technical concepts to both technical and non-technical audiences.
- Problem-Solving: Strong analytical and investigative capabilities.
Collaboration & Stakeholder Engagement: Proven ability to influence across functions and create strong partnerships.
- Adaptability: Comfortable in a fast-paced, evolving security landscape.
Education and Qualifications
- 4–6 years of demonstrated experience in data protection, information security, or compliance roles.
- 3+ years hands-on experience with Microsoft Purview or M365 Compliance solutions or equivalent, transferable technology.
- Bachelor’s Degree in Cybersecurity, Information Systems, or related field (or equivalent experience).
- Certifications such as CISSP, CISM, Microsoft SC-400, or similar are preferred.
Ultra Clean Technology is proud to be an equal-opportunity employer. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under laws and regulations.