Data Protection Systems Analyst

Job Overview

Under the direction of the Assistant Manager, Records & Information, the Data Protection Systems Analyst matures the organization’s data security posture management (DSPM) and data loss protection (DLP) capabilities across cloud and on-premises environments. This role leads the daily administration, configuration, monitoring, and continuous improvement of the organization’s DSPM and DLP platforms to protect sensitive data, ensure compliance, and reduce risk by discovering, classifying, and monitoring sensitive data across cloud, endpoint, application, and repository environments. This role also supports electronic records management, workflow, forms, metadata, retention, permissions, and repository administration. The position promotes secure, compliant, and efficient information handling practices across the organization.

What you will be doing:

• Work within current data security posture management and data loss prevention applications to discover, classify, and continuously monitor data across SaaS, Azure, application environments, endpoints, and repositories.
• Maintain dashboards, metrics, and reporting for security posture, trends, and SLAs. Provide guidance on least-privilege access and secure data lifecycle practices.
• Orchestrate posture review and risk assessments; document finding and track closure. Work directly with the Assistant Manager, Records & Information to develop corrective action plans.
• Administer and optimize the organization’s data loss prevention solutions. (e.g. Symmetry DataGuard, Microsoft Purview, etc).
• Create, test, and refine DLP classifiers, rules, labels, alerting, and groups for email, endpoints, cloud applications, web, and network channels; minimize false positives while improving coverage.
• Establish incident response workflows for DLP events; triage alerts, investigate user activity, and coordinate response with the Assistant Manager, Records & Information.
• Conduct user awareness training, job aides, and enablement for responsible data handling.
• Design, build, and maintain workflows, business processes, forms, automated document routing and processes, retention actions, metadata capture, application integrations, etc.
• Align ERM configurations with classification schemes, retention schedules, legal holds, and privacy requirements.
• Monitor repository health, permissions, metadata, and performance; assist with upgrades, patches, and environment changes.
• Performs other related duties as assigned.

What you need:

• Bachelor’s degree in information security, information systems, or equivalent experience.
• Three (3) years in information security including some direct experience in data loss prevention and data security posture management administration and design.
• Experience in the public sector or regulated industries; familiarity with retention schedules and legal data/information/record requirements.