Data Security Analyst

As a Data Security Analyst, you will champion the security and integrity of our ever-evolving data landscape, focusing on modern domains like DLP and DSPM, empowering classification, protection, and monitoring across cloud and on-prem environments.

Key Responsibilities :

Data Leak Prevention (DLP) : Implement and extend DLP solutions to secure sensitive information across data at rest, in motion and in use.

Data Security Posture Management (DSPM) : Continuously assess and enhance the security posture of our data estates, using DSPM techniques to discover inventory and remediate exposures.

Monitoring Shared Folder Activities : Monitor and analyze activities on shared drives and folders for anomalous behavior and unauthorized access.

Sensitive Information Types (SITs) & Data Types : Identify and define SITs and data types to drive accurate classification and automated policy enforcement.

Sensitivity Labels & Microsoft Information Protection (MIP) : Apply and manage sensitivity labels via MIP to enforce encryption, rights management and access restrictions.

Data Access Monitoring (DAM) : Utilize DAM capabilities to track database access, detect threats, and respond to compromised credentials.

File Activity Logs Monitoring : Maintain visibility into user activity across SaaS / On-Prem applications (e.g. O365, SharePoint, ServiceNow, Salesforce, Servers, Endpoints).

Integration of Security Tools : Leverage cutting-edge platforms such as Microsoft Purview, Varonis DSP, Harmony Browse and Zscaler and more to enforce policies and glean actionable insights.

Security Frameworks & Compliance : Apply knowledge of security and privacy frameworks (e.g. NIST, CIS, PCI-DSS, GDPR) to maintain compliance and best practices.

Scripting & Automation : Develop and maintain scripts in PowerShell / Python to automate classification, remediation and reporting.

Experience : Proven track record in data security encompassing DLP, DSPM, data types of classification, SIT definition, sensitivity labels and MIP.

Technical Skills : Hands-on expertise with Microsoft Purview, Varonis, Harmony Browse, Zscaler or any other DLP / DSPM platforms.

Scripting : Strong scripting skills in PowerShell and Python to build tools, automations and alerts.

Data Security Frameworks & Regulation : Deep understanding of frameworks and regulations (GDPR, ISO 27001, NIST CSF / SP800, PCI DSS, SOC 2).

Investigation & Response : Ability to investigate anomalies, respond to incidents and escalate appropriately.

Teamwork : Collaboration, transparency and knowledge share is the key for successful teamwork.

Communication : Excellent written and verbal communication skills to collaborate across functions and convey complex technical concepts clearly.