IT Security Cloud Data Protection Engineer

This is a hybrid position that requires individual to work 2 days a week from our location in Cedar Falls, IA.

WANT TO BE A PART OF AN AWARD WINNING TEAM, APPLY TODAY!!

Take a look at all our great benefits here !

Final date to receive applications:
Wednesday January 21st, 2026

Location:

Cedar Falls, IA

Hybrid eligible

Exempt

The IT Security Cloud Data Protection Engineer is focused on securing Microsoft 365 and Azure environments, with a strong emphasis in using Microsoft Purview Information Protection (MPIP) to enforce and align the security posture with data governance and compliance standards.

• Serve as the subject matter expert for Microsoft Purview Information Protection (MPIP) suite of tools.
• Design, implement, and maintain MPIP for M365, Azure, and on-premise.
• Develop, document, and enforce MPIP security policies, standards, and best practices for cloud-based resources across the Microsoft tenant (Exchange, SharePoint, One Drive, Teams, Azure).
• Deploy and configure data classification in Microsoft 365 and Azure to ensure alignment with Veridian’s Data Governance solution Lightbeam.ai.
• Design and deploy MPIP data loss prevention (DLP) that aligns with Veridian’s current standards and on-premise solutions.
• Work collaboratively with the IT Security Analyst and Specialists to monitor, investigate, and respond to policy violations and security alerts related to data handling using Microsoft Purview dashboards and alerts.
• Stay current on emerging threats, vulnerabilities, and security requirements affecting Veridian’s cloud environment.
• Work with cross departmental teams to support business initiatives leveraging M365 and Azure, ensuring security requirements are established and adhered to.
• Evaluate and recommend new security solutions based on emerging threats.
• Collaborate with stakeholders to understand data governance needs and ensure proper information lifecycle management.
• Provide guidance and training to stakeholders on cloud security best practices and data governance requirements.
• Stay up to date with evolving Microsoft security features, compliance regulations, and industry trends.
• On call availability required for system support as needed (including nights and weekends).
• Monitor and provide solutions to IT Security support tickets.

• Oral and written communication skills.
• Member service focus.
• Attention to detail and accuracy.
• Positive attitude that supports a team environment.
• Dependable and punctual; flexible during peak times.
• High level of confidentiality.
• Organizational skills.
• Self-motivated; ability to work without close supervision.
• Problem solving; analysis.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job:

• Occasionally lift and/or move items over 50 pounds.
• Remain sedentary (seated) for extended periods of time.

This job operates in a professional office environment and routinely uses standard office equipment.

Limited travel expected.

• Bachelor’s degree in computer science, Information Systems, or related field or equivalent combination of education, training, and experience of 8+ years.
• 2+ years of experience developing and designing cloud security with a focus on M365 and Azure.
• Knowledge of cybersecurity frameworks (NIST, CSF 2.0, CIS, ISO ).
• Familiarity working with financial regulatory and compliance requirements including NCUA, FFIEC, HIPAA, GLBA, and PCI DSS requirements.

• 8+ years of experience working with information security.
• 4+ years of experience configuring and managing Microsoft Purview specifically with data classification, data loss prevention, and insider risk management.
• Prior experience with incident response and case management in cloud environments.
• Certifications:
  
  Microsoft 365 Security Administrator or Azure Security Engineer.

Veridian Credit Union is a PCI compliant financial institution to ensure the security of member information. As such, all employees are expected to ensure security measures are in place and adhered to regarding PCI and other highly secure data compliance requirements.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, and responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.