Data Security Analyst

As a Data Security Analyst, you will champion the security and integrity of our ever-evolving data landscape, focusing on modern domains like DLP and DSPM, empowering classification, protection, and monitoring across cloud and on-prem environments.

Key Responsibilities:

Data Leak Prevention (DLP): Implement and extend DLP solutions to secure sensitive information across data at rest, in motion and in use.

Data Security Posture Management (DSPM): Continuously assess and enhance the security posture of our data estates, using DSPM techniques to discover inventory and remediate exposures.

Monitoring Shared Folder Activities: Monitor and analyze activities on shared drives and folders for anomalous behavior and unauthorized access.

Sensitive Information Types (SITs) & Data Types: Identify and define SITs and data types to drive accurate classification and automated policy enforcement.

Sensitivity Labels & Microsoft Information Protection (MIP): Apply and manage sensitivity labels via MIP to enforce encryption, rights management and access restrictions.

Data Access Monitoring (DAM): Utilize DAM capabilities to track database access, detect threats, and respond to compromised credentials.

File Activity Logs Monitoring: Maintain visibility into user activity across SaaS/On-Prem applications (e.g. O365, SharePoint, ServiceNow, Salesforce, Servers, Endpoints).

Integration of Security Tools: Leverage cutting-edge platforms such as Microsoft Purview, Varonis DSP, Harmony Browse and Zscaler and more to enforce policies and glean actionable insights.

Security Frameworks & Compliance: Apply knowledge of security and privacy frameworks (e.g. NIST, CIS, PCI-DSS, GDPR) to maintain compliance and best practices.

Scripting & Automation: Develop and maintain scripts in PowerShell/Python to automate classification, remediation and reporting.

Experience:

Technical Skills:

Scripting

Data Security Frameworks & Regulation: Deep understanding of frameworks and regulations (GDPR, ISO 27001, NIST CSF/SP800, PCI DSS, SOC 2).

Investigation & Response

Teamwork:

Communication: Excellent written and verbal communication skills to collaborate across functions and convey complex technical concepts clearly.