Data Security Analyst — DLP & Insider Risk

First-Horizon-Bank; Memphis (TN); On-site; USD 90,000 - 120,000; Full time

Job summary

First Horizon Bank in Memphis seeks a hands-on Data Security & Insider Risk Analyst to protect sensitive information across Microsoft 365, endpoints, and enterprise platforms. You will investigate DLP, insider risk, and endpoint security events while tuning Microsoft Purview policies to improve accuracy and reduce risk.

Collaborating with security, IT, HR, and compliance teams, you will develop dashboards, document procedures, and drive practical control improvements.

Qualifications

• Experience in information security, data protection, security operations, incident response, or a related discipline.
• Working knowledge of DLP concepts, data classification, sensitive data handling, insider risk, and exfiltration paths.
• Ability to investigate alerts using evidence from users, devices, applications, email, collaboration platforms, and logs.
• Experience configuring or tuning security policies, detections, or alerting logic in an enterprise environment.
• Strong analytical and problem-solving skills with clear judgment.
• Clear written and verbal communication, handling sensitive investigations professionally.
• Ability to manage multiple investigations with thorough case documentation.

Responsibilities

• Monitor, triage, investigate, and respond to DLP, insider risk, and endpoint security alerts.
• Determine incident scope, data sensitivity, and potential impact; document findings and containment steps.
• Administer and tune Purview DLP policies, rules, classifiers, and notifications.
• Support DLP controls across Exchange, SharePoint, OneDrive, Teams, endpoints, and cloud apps.
• Review false positives/negatives and implement policy improvements.
• Support Insider Risk Management use cases, policies, and privacy-aware workflows.
• Collaborate with identity, security, HR, IR teams during investigations and remediations.
• Utilize Purview, Defender, SIEMs to build timelines and validate findings.
• Create dashboards and metrics communicating incident trends and control gaps.
• Develop procedures, playbooks, tuning standards, and knowledge articles.

Skills

Security operations

Incident response

Data protection

DLP concepts

Insider risk

Investigation skills

Analytical thinking

Communication skills

Tools

Microsoft Purview

Microsoft Defender

SentinelOne EDR

Splunk SIEM

Power BI

Tableau

SQL

Excel

Kusto (KQL)

Job description

First Horizon Bank in Memphis seeks a hands-on Data Security & Insider Risk Analyst to protect sensitive information across Microsoft 365, endpoints, and enterprise platforms. You will investigate DLP, insider risk, and endpoint security events while tuning Microsoft Purview policies to improve accuracy and reduce risk.

Collaborating with security, IT, HR, and compliance teams, you will develop dashboards, document procedures, and drive practical control improvements.