Senior Data Protection Specialist

Senior Data Loss Prevention (DLP) Analyst

Position Overview

We are seeking an experienced and proactive Senior Data Loss Prevention (DLP) Analyst to join our Information Security team. This role is responsible for protecting sensitive corporate and customer data across endpoints, cloud platforms, collaboration tools, and email systems.

The successful candidate will serve as a subject matter expert for Data Loss Prevention, partnering with Information Security, Compliance, Legal, Human Resources, and IT teams to develop and enforce data protection policies, monitor data risks, investigate incidents, and strengthen the organization's security posture.

Key Responsibilities

Data Protection & DLP Operations

• Monitor, investigate, and respond to DLP alerts across endpoints, cloud applications, and email environments
• Administer and optimize DLP technologies to ensure effective protection of sensitive information
• Analyze security incidents to identify root causes, determine business impact, and recommend remediation actions
• Develop, implement, and maintain DLP policies, data classification standards, and security controls

Security Governance & Risk Management

• Partner with Information Security, Compliance, Legal, HR, and IT teams to identify and mitigate data handling risks
• Review data movement trends and user behaviors to identify potential policy violations and security concerns
• Support audit activities and compliance initiatives related to data protection controls
• Maintain documentation, exception management processes, and policy governance procedures
• Stay current on emerging threats, industry trends, and regulatory requirements impacting data protection

Endpoint & Cloud Security

• Support security controls and policy enforcement across Windows and macOS environments
• Manage endpoint security configurations and conditional access controls
• Assist in the implementation of Zero Trust security principles and identity-based access controls
• Ensure cloud-based DLP controls are aligned with organizational security requirements

Incident Response & Security Operations

• Develop and maintain playbooks for data leakage incidents, insider risk investigations, and policy violations
• Participate in incident investigations involving potential unauthorized disclosure of sensitive information
• Support Security Operations and SIEM integrations related to DLP monitoring and reporting
• Participate in on-call rotations and provide occasional after-hours support for critical security incidents

Training & Awareness

• Develop and deliver security awareness training focused on data protection and secure information handling
• Educate employees on DLP policies, compliance requirements, and cybersecurity best practices
• Promote a culture of security awareness throughout the organization

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent professional experience
• 7+ years of cybersecurity experience
• 5+ years of hands-on Data Loss Prevention (DLP) experience
• Experience working in a Security Operations Center (SOC) environment or supporting SIEM-based security monitoring
• Strong understanding of:
• Data Loss Prevention technologies
• Data classification frameworks
• Endpoint security
• Email security and encryption
• Cloud security controls
• Identity and Access Management (IAM)
• Conditional Access policies
• Zero Trust security architecture

Preferred Technical Experience

• Microsoft Purview DLP
• Microsoft Intune
• Microsoft Entra ID (Azure AD)
• JAMF Pro
• Egress
• Microsoft Defender Security Suite
• SIEM platforms
• User and Entity Behavior Analytics (UEBA)
• Insider Risk Management solutions

Regulatory & Compliance Knowledge

• GDPR
• HIPAA
• PCI-DSS
• ISO 27001
• NIST Cybersecurity Framework
• Data privacy and information security regulations

Certifications Preferred

• Microsoft SC-400
• Microsoft SC-300
• CISSP
• CISM
• CompTIA Security+
• CDPSE
• GIAC Security Certifications

Skills & Competencies

• Strong analytical and incident investigation skills
• Excellent written and verbal communication abilities
• Ability to explain complex security concepts to technical and non-technical audiences
• Strong problem-solving and critical-thinking capabilities
• Ability to manage sensitive information with discretion and professionalism
• Experience working collaboratively within global and cross-functional teams
• Strong project management and organizational skills