Data Protection Analyst

Acrisure, LLC; Atlanta (GA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Employee Assistance Program

Commuter benefits

Job summary

Acrisure is seeking a Data Protection Analyst to monitor, investigate, and respond to insider risk and data protection events across the organization. You will work with Security Operations, Legal, HR, Privacy, and IT to support investigations, DSARs, and data protection initiatives using Microsoft Purview, ServiceNow, and Microsoft 365.

You will help protect sensitive company and client data, deliver high-quality investigations, and drive improvements to detection and monitoring across the

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 2+ years in Security Operations, Cybersecurity, Insider Risk, Digital Forensics, eDiscovery, Compliance, Privacy, or Incident Response.
• Experience investigating security events involving sensitive information.
• Working knowledge of Microsoft 365 security, collaboration, and data protection capabilities.
• Experience using case management platforms such as ServiceNow or similar systems.
• Strong analytical, investigative, documentation, and communication skills.

Responsibilities

• Monitor and investigate insider risk alerts, data exfiltration attempts, and DLP incidents.
• Triage and document insider risk cases using enterprise case management processes.
• Collect, preserve, and analyze evidentiary data for investigations.
• Coordinate with Legal, HR, Privacy, Compliance, and management during investigations.
• Use ServiceNow and Purview to manage investigation workflows and evidence collection.
• Identify insider risk trends and recommend detection and response improvements.

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Criminal Justice, or related field

Tools

Microsoft Purview

ServiceNow

Microsoft 365 Security

Data Loss Prevention (DLP)

eDiscovery

Job description

About Acrisure A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. By bringing cutting‑edge technology and top‑tier human support together, we connect clients with customized solutions across insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services — and more. In the last twelve years, Acrisure has grown in revenue from $38 million to nearly $5 billion, with over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.

Job Summary

The Data Protection Analyst is responsible for monitoring, investigating, and responding to data protection, insider risk, and data exfiltration events across the organization. This role serves as a key member of the Cybersecurity team, leveraging Microsoft Purview, ServiceNow, Microsoft 365, and other security technologies to identify, investigate, and mitigate threats involving sensitive company, client, financial, and regulated data. The Analyst partners closely with Security Operations, Legal, Human Resources, Privacy, and IT teams to support insider risk investigations, eDiscovery requests, data subject access requests (DSARs), and data protection initiatives. This position plays a critical role in protecting Acrisure information assets while ensuring investigations are conducted in accordance with legal, regulatory, and privacy requirements. Success in this role means protecting Acrisure's sensitive data by quickly identifying, investigating, and mitigating insider risk and data protection incidents before they become business, legal, regulatory, or reputational events. You will deliver high-quality investigations, improve detection fidelity, and provide actionable insights that strengthen data protection controls, reduce risk, and support informed decisions across Security, Legal, HR, Privacy, and business leadership.

Responsibilities

Insider Risk Operations

• Monitor and investigate insider risk alerts, suspicious user activity, data exfiltration attempts, and DLP incidents.
• Conduct investigations related to mass downloads, large-scale sharing, data staging, privileged account misuse, and potential account compromise.
• Triage and document insider risk cases using the enterprise case management process.
• Collect, preserve, and analyze evidentiary data in support of investigations.
• Coordinate with Legal, Human Resources, Privacy, Compliance, and management teams during investigations.

Data Protection and DLP Monitoring

• Monitor DLP alerts across Microsoft 365, endpoints, email, SharePoint, OneDrive, Teams, and cloud collaboration platforms.
• Review policy violations and user justifications to identify repeat patterns, emerging risk, and areas requiring policy tuning.
• Assist with tuning detection use cases to improve signal quality and reduce false positives.
• Track and report key metrics including alert volume, true positive rate, time to triage, time to case closure, aged cases, and repeat patterns.

Investigations and Case Management Support

• Use ServiceNow and Microsoft Purview capabilities to manage investigation workflows and evidence collection.
• Maintain accurate case notes, evidence records, timelines, and reporting artifacts.
• Escalate high-risk cases and policy exceptions to the appropriate Cybersecurity, Legal, HR, Privacy, or business stakeholders.

Threat Detection and Continuous Improvement

• Identify insider risk trends and recommend improvements to detection, response, and escalation processes.
• Participate in proactive threat hunting involving sensitive data movement and user behavior.
• Contribute to insider risk playbooks, response procedures, dashboards, and operational standards.
• Support data protection awareness efforts by identifying common user behaviors and recurring policy friction points.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Criminal Justice, or a related field, or equivalent practical experience.
• 2+ years of experience in Security Operations, Cybersecurity, Insider Risk, Digital Forensics, eDiscovery, Compliance, Privacy, or Incident Response.
• Experience investigating security events and user activity involving sensitive information.
• Working knowledge of Microsoft 365 security, collaboration, and data protection capabilities.
• Experience using case management platforms such as ServiceNow or similar systems.
• Strong analytical, investigative, documentation, and communication skills.
• Ability to work with sensitive matters and partner appropriately with Legal, HR, Privacy, Compliance, IT, and business stakeholders.

Preferred Qualifications

• Experience with Microsoft Purview Insider Risk Management.
• Experience with Microsoft Purview DLP, eDiscovery, and Information Protection.
• Experience supporting HR, Legal, Privacy, Compliance, or regulatory investigations.
• Knowledge of data protection, privacy, employee monitoring, and regulated data handling concepts.
• Security certifications such as SC-200, SC-400, GCFA, GCFE, GCIH, Security+, CySA+, or similar.

#LI-CH1 Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Why Join Us

At Acrisure, we’re building more than a business, we’re building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future. Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children's Hospital in Grand Rapids, Michigan, UPMC Children's Hospital in Pittsburgh, Pennsylvania and Blythedale Children's Hospital in Valhalla, New York.

Employee Benefits

• Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance
• life and disability insurance
• fertility benefits
• wellness resources
• and paid sick time
• Mental Wellness: Generous paid time off and holidays
• Employee Assistance Program (EAP)
• and a complimentary Calm app subscription
• Financial Wellness: Immediate vesting in a 401(k) plan
• Health Savings Account (HSA) and Flexible Spending Account (FSA) options
• commuter benefits
• and employee discount programs
• Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents)
• legal plan options
• and pet insurance coverage

… and so much more! This list is not exhaustive of all available benefits.

Eligibility and waiting periods may apply to certain offerings.

Benefits may vary based on subsidiary entity and geographic location.

Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting [e-mail].

Final candidates will be required to complete post-offer verification processes related to the role and in accordance with applicable laws.

California Residents: Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.

Recruitment Fraud: Please visit here to learn more about our Recruitment Fraud Notice.

Welcome, your new opportunity awaits you.

There are amazing opportunities for talented people in every part of our business.

We invite you to find your next great opportunity with us.

To Executive Search Firms & Staffing Agencies: Acrisure does not accept unsolicited resumes from any agencies that have not signed a mutual service agreement. All unsolicited resumes will be considered Acrisure's property, and Acrisure will not be obligated to pay a referral fee. This includes resumes submitted directly to Hiring Managers without contacting Acrisure's Human Resources Talent Department.