Overview
In this role, you will connect OneTrust Data Discovery to systems that store or process personal data, building scalable, secure discovery and classification across enterprise infrastructure. You’ll gather metadata, deploy and configure worker nodes and connectors, and collaborate with SMEs to ensure secure and efficient scanning at scale. You’ll operate at the intersection of CyberSecurity, IT Operations and Application teams to support compliance, risk reduction and data governance. This position offers hands-on integration work with cross-functional stakeholders and a path to impact data visibility and protection across the environment.
Responsibilities
- Asset connectivity and inventory of technical metadata
- Deploy and maintain OneTrust Data Discovery worker nodes and connectors
- Establish secure connectivity to scan targets and validate coverage
- Manage credentials and least-privilege access via enterprise vaults
- Coordinate network changes and firewall rules for discovery
- Collaborate with application owners, DBAs and cloud teams for scheduling and maintenance
- Document configurations, playbooks and onboarding patterns
- Develop runbooks and SOPs for repeatable integration
- Support audits with evidence, change tickets and network diagrams
Key requirements
- Technical breadth across enterprise IT
- Experience with Windows Server and Linux
- Experience with databases (SQL Server, Oracle, PostgreSQL, MySQL, MongoDB) and file shares
- Networking knowledge (TCP/IP, DNS, VLANs, firewalls, VPNs)
- Identity and access management (AD/Entra ID, LDAP, Kerberos, service principals)
- Experience deploying/scaling infrastructure agents or scanning tools
- Hands-on with credentials/secret management and least privilege patterns
- Excellent documentation and collaboration with SMEs
- Collaborative
- Structured documentation
- Multi-stakeholder coordination
- OneTrust Data Discovery (minimum requirement)
- CyberArk, HashiCorp Vault, Azure Key Vault for secret management
- Networking and security tooling (firewalls, VPNs, IDS/IPS)
…
