BAT is evolving at pace into a global multi-category business. We are on a mission to decrease the health impact of our industry.
To achieve our ambition, we are looking for colleagues who are ready to Be The Change. Come, join us on this journey!
]British American Tobacco Poland has an exciting opportunity for a Data Security Engineer in Warsaw
Reporting to the Global Head of Security Architecture & Engineering, and partnering with the broader Digital Business Solutions (DBS) organization, you will be responsible for the definition and maintenance of a comprehensive set of Security Solutions for Data Security, to enable the CyberSecurity organization to achieve best-in-class protection.
The Data Security Engineer will play a pivotal role in defining, implementing, and managing data security practices to protect sensitive information across the organization. This role involves working closely with application owners and the application security team to identify data types, classify data, and ensure compliance with data protection policies. The engineer will leverage tools like Microsoft Purview and Imperva to enhance visibility, governance, and security of data across the organization.
You will team up with teammates and partners to deliver new solutions that align with the growth strategy of the BAT business. As well as maintaining/evolving existing ones in close collaboration with the colleagues in the Architecture & Engineering team to build a cohesive level protection across Security Domains and IT platforms.
Your key responsibilities will include:
- Delivers security engineering tasks for Data Security solutions
- Establishes standards and guidelines, communicating these to all stakeholders to ensure consistency as well as compliance.
- Work DBS application teams to onboard their platforms into the Data Security solutions
- Collaborates closely with the vendors that provide solutions for Data Security to BAT (both directly/indirectly)
- Problem-solve, involving leading teams in identifying, researching, and coordinating the resources necessary to effectively troubleshoot/diagnose complex issues.
- Strives for continuous improvements, while finetuning the configurations and automating repeatable tasks.
- Proactively researches, monitors, learns, and assesses industry/technology advancements.
- Recommend and plan use of new features and functionality to improve overall system performance, security and availability as well as business productivity.
What are we looking for?
- Data Security & Compliance: Strong understanding of data protection regulations (GDPR, HIPAA, CCPA) and experience implementing security solutions like encryption, access controls, DLP tools, and database security.
- Application & Network Security: Experience in designing and securing applications, implementing secure coding practices, performing threat modeling, penetration testing, and ensuring secure network design with firewalls, VPNs, and security monitoring tools.
- Security Testing & Vulnerability Management: Hands-on experience with security assessments, static and dynamic application security testing (SAST, DAST), vulnerability management, and security patching.
- Incident Response & Risk Management: Expertise in handling security incidents, identifying root causes, mitigating risks, and implementing security monitoring through SIEM solutions and log analysis.
- Access Control & Authorization: Proficiency in implementing access control mechanisms, managing authentication/authorization systems, privilege management, and database security hardening.
- Cloud & Mobile Security: Understanding of cloud security standard methodologies for Azure and AWS, securing cloud-based data, mobile security principles, secure app development, and mobile device management (MDM).
- Data Governance & Classification: Experience implementing data classification schemes, enforcing governance policies, and ensuring data protection through encryption, tokenization, and compliance frameworks.
- Security Tools & Automation: Hands-on experience with Microsoft Purview, DLP tools, SIEM solutions, security testing tools (SAST, DAST), and automation for security monitoring and vulnerability detection.
Beneficial
- Certified Information Systems Security Professional (CISSP)
- Scaled Agile Framework (SAFe 5 or higher)
What we offer you?
• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes
WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.
Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.
We see the career breaks as opportunities not obstacles. Through The Global Returners program, we support professionals looking to restart their careers after an extended absence from the workforce (e.g. time out caring for family, parental leave, national service, sabbatical and/or starting an own venture).
Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.
If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.