Senior Data Loss Prevention (DLP) Analyst

Job Title: Senior Data Loss Prevention (DLP) Analyst
Job ID: 79582
Location: Canada –Remote

Overview:
We are seeking a detail-oriented and proactive Senior Data Loss Prevention (DLP) Analyst to join our team. In this role, you will be responsible for implementing and managing data protection strategies to safeguard sensitive information across our organization. You will have a mentoring and leadership type role without having any direct reports. As part of the Security Operations team, you will work closely with other IT teams to identify potential risks, monitor data movement, and ensure compliance with organizational policies and privacy regulations. You will also have a collaborative relationship with the business to ensure their processes align with DLP compliance. The ideal candidate would have strong DLP and security best practices knowledge, significant experience working with DLP tools, including Microsoft Purview and an ability to quickly respond to data leak incidents.

What you will do:

• Mentoring and Leadership tasks: As a technical team lead, help guide other DLP Analysts and prioritize initiatives. Identify gaps and provide solutions.

• Implement and Manage DLP Tools: Configure, monitor, and maintain DLP systems to protect data across various channels (email, cloud, endpoints, etc.)

• Monitor Data Movement: Continuously monitor data in motion, at rest, and in use to identify any unauthorized access, transmission, or potential leaks of sensitive information.

• Data Classification: Work with teams to classify and categorize sensitive data to ensure appropriate protection measures are applied.

• Incident Detection and Response: Identify, investigate, and respond to data loss incidents, breaches, or policy violations in a timely manner. Coordinate with security teams to mitigate risks. Escalate for forensic analysis as needed and work with the forensic investigators on the Information Security team.

• Policy Development and Enforcement: Collaborate with the Information Security Compliance team to provide expertise in data policy development and implement enforcement efforts.

• Collaboration with the Business: Collaborate with the business, IT and compliance teams to integrate DLP into everyday processes to ensure a holistic approach to data protection.

• Reporting and Documentation: Create and maintain detailed reports of DLP incidents, security audits, and compliance with data protection regulations. Provide regular updates to management.

• Data Hygiene and Cleansing: Work with the business to ensure data is being stored in enterprise approved locations and remediating non-compliance.

• PCI Compliance: Work with the Information Security GRC team and business to ensure that the organization continues to move towards becoming PCI Compliant.

• User Awareness and Training: Assist in educating employees about DLP policies and best practices to reduce the risk of accidental data loss or breaches.

• Continuous Improvement: Stay up to date on the latest data security trends and technologies to continually improve DLP practices and tools.

What you must have:

• Understanding of core security concepts, including confidentiality, integrity, and availability.

• Previous experience and expertise (3-5 years) with DLP technologies and tools. Must have experience with Microsoft Purview.

• Understanding different means of data exfiltration and counteraction measures.

• Ability to assess risks associated with data loss and propose strategies to mitigate those risks.

• Ability to analyze and interpret data logs, alerts, and incident reports to identify potential data breaches or risks.

• Knowledge of data protection laws and regulations to ensure compliance.

• Awareness of privacy regulations and their impact on data handling, especially for sensitive or personal data.

• Skilled in recognizing patterns and anomalies in data usage that could indicate unauthorized access or data leaks.

• Ability to clearly report incidents, collaborate with cross-functional teams (IT, legal, compliance), and communicate effectively with both technical and non-technical stakeholders.

• Strong interpersonal skills are a must as you will be communicating often with non-IT stakeholders.

• Strong organizational and multi-tasking skills. Must be able to prioritize based on severity and criticality to the business.

• Self-starter, proactive, and extremely motivated.

• Forensic investigations experience is a bonus.

Education, Certifications & Training

• An undergraduate degree, preferably in Information Security, Computer Science, Cyber Security, Engineering, or a highly related field.

• A core security certification such as CISSP, CISM, CISA, CEH and/or DLP certification.

• Specialized DLP tool training, security best practices, and compliance training.

• 3-5 years of hands-on DLP training in the field and onboarding new DLP tools.

• A desire to continue education and training.

Salary/Rate Range:up to $210,000annually

For more information about TEEMA and to consider other career opportunities, please visit our website atwww.teemagroup.com