Information Security Analyst (Data Loss Prevention Analyst)

So,what’stheroleall about?

We are seeking a DLP Analyst to strengthen NiCE’s data protection posture by monitoring, analyzing, and responding to data loss prevention alerts generated primarily through Microsoft Purview. The role bridges technical and business perspectives — reviewing violations, advising IT on configuration improvements, and engaging with business teams to address root causes of risky data handling.

We are looking for a Data Loss Prevention (DLP) Analyst to join our team and help us maintain and improve our data protection standards and posture.

As Data Loss Prevention (DLP) Analyst, you will support the DPO in playing a key role in privacy governance, risk management, and incident response, with a particular focus on Data Loss Prevention (DLP) monitoring and controls across the enterprise.

How will you make an impact?

• Monitor & Analyze: Review DLP alerts and violations in Microsoft Purview to identify trends, false positives, and potential data leakage risks
• Technical Feedback: Recommend threshold adjustments, rule refinements, and configuration changes to IT owners to improve detection accuracy and reduce alert fatigue
• Business Engagement: Liaise with business stakeholders to understand legitimate business needs driving DLP triggers (e.g., attempts to send sensitive data externally)
• Education & Awareness: Provide feedback to business units on secure data handling practices, raising awareness of policy and compliance obligations
• Incident Response Support: Escalate high-risk incidents to the Security Operations team and contribute to investigations as needed
• Continuous Improvement: Track and report on DLP effectiveness, emerging trends, and propose enhancements to policies, workflows, and training

Have you got what it takes?

• Experience with Microsoft Purview or other enterprise DLP solutions
• Strong analytical skills with the ability to distinguish between false positives and genuine data risks
• Understanding of data classification, data protection regulations (GDPR, NIS2, ISO 27001), and secure information handling
• Ability to engage both technical teams (IT, infrastructure) and business stakeholders (non-technical staff) effectively
• Excellent communication, presentation, and interpersonal skills
• A high level of integrity, professionalism, and confidentiality
• A proactive, collaborative, and problem-solving attitude

Certification Requirements

• Familiarity with other Microsoft 365 security and compliance tools (Defender, Sentinel).
• Knowledge of data governance and privacy frameworks.
• Relevant certifications (e.g., Microsoft Certified: Information Protection Administrator, ISO 27001, CISM, CIPP/E).
• Prior experience in a security operations, risk, or compliance team.

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NiCE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NiCEr!  

Enjoy NiCE-FLEX!

At NiCE, we work according to the NiCE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere. 

Requisition ID: