Data Protection Analyst

PwC; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

PwC is seeking an experienced leader to own the data protection strategy across data at rest, in motion, and in use. You will govern capabilities from discovery and labeling to DLP, insider risk, and cloud DSPM, and design architectures for on-prem, hybrid, and cloud environments.

You will drive adoption of platforms such as Microsoft Purview, Varonis, Cyera, and related AI-assisted workflows, while ensuring policy consistency across email, collaboration tools, endpoints, and databases.

Qualifications

• Experience owning and governing data protection across data at rest, in motion, and in use.
• Ability to design data protection architectures for on-prem, hybrid, and cloud environments.
• Proven track record implementing DSPM platforms and AI-assisted protection workflows.

Responsibilities

• Own and drive the organizations data protection strategy across data at rest, in motion, and in use.
• Define and govern data protection capabilities across discovery, labeling, access governance, DLP, insider risk, and cloud DSPM.
• Lead implementation of data protection platforms and integrate with security operations and legal/compliance teams.
• Communicate data risk and protection posture to technical and non-technical stakeholders.
• Lead, mentor, and develop a team of data protection analysts and engineers.

Skills

Data discovery and visibility

Data classification and labeling

Data access governance

Data loss prevention

Insider risk detection

DSPM (cloud data protection)

AI/ML in data protection

Policy enforcement

Security architecture

Tools

Microsoft Purview

Varonis

Cyera

Job description

Role & responsibilities

Own and drive the organizations data protection strategy across data at rest, in motion, and in use

• Define and govern data protection capabilities across: Data discovery and visibility, Data classification and labeling, Data access governance and exposure management, Data loss prevention and policy enforcement, Insider risk and misuse detection, Cloud and SaaS data protection (DSPM)

Design and oversee end-to-end data protection architectures across on-prem, hybrid, and cloud environments

• Lead implementation and integration of data protection platforms such as: o Microsoft Purview (Information Protection, DLP, Insider Risk, Records Management) o Varonis (data discovery, permissions analysis, insider risk, automation) o Cyera or other DSPM platforms (cloud data discovery, risk posture, exposure analysis)

Ensure consistent policy models across email, collaboration tools, endpoints, cloud storage, databases, and SaaS applications

Experience applying AI/ML or generative AI to enhance data protection capabilities, such as intelligent data classification, risk prioritization, anomaly detection, or insider risk analysis

Experience designing or leveraging AI-assisted workflows for data protection operations, including alert triage, investigation support, policy tuning, and automation of repetitive tasks

Establish and manage operational processes for data protection monitoring, alert triage, investigation, and response

Ability to communicate data risk and protection posture to technical and non-technical stakeholders

Define escalation paths and coordinate with SOC, IR, Legal, HR, and Compliance teams

Lead, mentor, and develop a team of data protection analysts and engineers

Set clear goals, priorities, and performance expectations for the team • Support hiring, onboarding, and ongoing skills development across data protection domains

Strong experience across multiple data protection domains, including data discovery, classification, access governance, DLP, insider risk, and cloud data protection

Solid understanding of the data lifecycle from creation to disposal