Data Protection Associate

The Depository Trust & Clearing Corporation (DTCC); Jersey City (NJ); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Base & incentives

Health & life insurance

Pension benefits

PTO & family leave

Hybrid work model

Job summary

DTCC is seeking a Data Protection Operations Associate to join the IT Cybersecurity & Platform Engineering team in a hybrid role based in the United States. You will triage alerts, validate findings, and coordinate remediation across DSPM, CASB, and DLP platforms.

The role emphasizes collaboration with data owners and IT partners, clear communication to non-technical stakeholders, and driving timely risk reduction while preserving user experience.

Qualifications

• Min 3 years of relevant security experience.
• Bachelor’s Degree and/or equivalent experience.
• Experience triaging alerts and investigations from security or data protection platforms.
• Strong analytical and judgment skills, with the ability to assess data risk.

Responsibilities

• Monitor, triage, and investigate alerts from DSPM platforms.
• Investigate CASB alerts related to unsanctioned SaaS usage.
• Investigate DLP events and take defined actions.
• Engage data owners and IT partners to validate findings and drive remediation.

Skills

Analytical thinking

Communication skills

Stakeholder engagement

Problem solving

Education

Bachelor’s Degree or equivalent

Tools

DSPM tools

CASB

DLP systems

Job description

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay And Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact You Will Have In This Role

Being a member of IT Cybersecurity & Platform Engineering team, the Data Protection Operations Assocaite is responsible for the day‑to‑day operation of DTCC’s data protection controls, with primary focus on triaging alerts, investigating data risk signals, managing exceptions and supporting remediation across DTCC's Data Protection technologies including DLP, CASB and DSPM.

This role sits in the first line of defense and serves as a key operational interface between security tooling, business users, and IT partners. The Analyst must combine strong analytical judgment with clear communication skills to assess risk, engage stakeholders, and drive timely resolution of data protection issues, while maintaining a consistent and professional user experience

Your Primary Responsibilities

Alert Triage & Investigation

• Monitor, triage, and investigate alerts and findings from: DSPM platforms (e.g., sensitive data discovery, exposure findings, excessive access)
• CASB / cloud security tools (unsanctioned SaaS usage, risky data sharing)
• DLP controls (email, endpoint, web, SaaS, and AI‑related channels)
• Assess alerts for severity, credibility, and business impact, distinguishing true data risk from false positives.
• Prioritize and process alerts in line with defined SLAs and escalation criteria.

Data Risk Validation & Remediation Support

• Analyze DSPM findings, engage data owners, application teams, and IT partners to validate findings, recommend and track remediation actions (access reduction, secure configuration, reclassification)
• Support remediation lifecycle through closure, documenting outcomes and residual risk.

CASB & DLP Operations

• Investigate CASB alerts related to Unsanctioned or high‑risk SaaS usage, Cloud data sharing patterns that may introduce exposure
• Investigate DLP events
• Execute defined response actions, elevate complex cases to Tier 2 engineering or incident response teams as required.

Stakeholder Communication & Engagement

• Serve as a primary operational point of contact for business and IT stakeholders on data protection issues.
• Communicate findings clearly and professionally to non‑technical audiences, explaining:
  • What was detected
  • Why it matters
  • What actions are required
  • Balance risk reduction with user experience, avoiding unnecessary friction that could drive control bypass.

Continuous Improvement & Feedback Loop

• Identify recurring alert patterns, false positives, and operational gaps across DSPM, CASB, and DLP tools.
• Provide structured feedback to Content Engineering and Engineering teams to support rule tuning and control enhancements.
• Contribute to improvements in operational runbooks, workflows, and triage consistency

Documentation, Metrics & Evidence

• Maintain accurate, audit‑ready case documentation for all investigations and remediation activities.
• Support production of operational metrics
• Assist with internal reviews, audit requests, and regulatory evidence gathering as a first‑line owner.

NOTE: The Primary Responsibilities of this role are not limited to the details above.*

Qualifications

• Min 3 years of relevant experience
• Bachelor’s Degree and/or equivalent experience

Talents Needed For Success

• 3–5+ years in security operations, data protection operations, SOC, or cloud security roles.
• Experience triaging alerts and investigations from security or data protection platforms.
• Working familiarity with technical controls and concepts including: Data Loss Prevention
• Cloud and SaaS security
• Data discovery, classification, and exposure risk
• Strong analytical and judgment skills, with the ability to assess data risk in real‑world business contexts.
• Excellent written and verbal communication skills.
• Prior experience engaging business users and application teams on security or data risk topics.
• Comfort working in a regulated or highly controlled environment

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.