Data Security Analyst

Role & responsibilities

Infosec email box handing and cordination with team and stakeholders

Monitoring and responding to security alerts/notifications from SIEM/Regulator/Phishing etc.

Managing security tools like EDR, SIEM, VM etc.

Monitoring Security KRIs and reporting on the same

Coordinating with stake holders for security controls implementation

Asset Management - Cooridnation with stake holders for asset updates

Conducting Phishing exercises

Conducting Security Drills

Participating in IT Disaster Recovery drills

Preaparing documents like SOPs, DIMs etc.

Providing support to end-users w.r.t security issues.

Prepare and submit reports (Daily, weekly, Monthly) as required.

Daily Monitoring:

• Review DLP reports daily to identify and assess potential data exfiltration incidents.
• Categorize each alert based on severity and channel type (e.g., email channel, Web channel).
• Log Potential Data Leak (PDL) findings in the daily monitoring tracker.
• Validate and eliminate false positives and update rule sets accordingly.

2. User Communication:

l

• Send follow-up emails to users flagged in DLP alerts, requesting detailed justifications.
• Record user responses in the communication.
• Evaluate justifications in alignment with organizational policies and business requirements.

3. Weekly Coordination:

• Conduct weekly status meetings with internal stakeholders and external vendors.
• Review and update on open DLP cases and ongoing action items.
• Discuss tuning of DLP rules and necessary policy adjustments.
• Document minutes of meetings and circulate them among all participants.
• Track and report on the progress of tasks assigned in previous meetings.

4. Action Tracker Follow-up:

• Review the GTB tracker for pending DLP-related actions.
• Update statuses of assigned tasks, noting any challenge.
• Collaborate with the GTB team to plan and test rule modifications effectively.

Preferred candidate profile