Data Security & DLP Insider Risk Specialist

First Horizon Bank; Memphis (TN); On-site; USD 90,000 - 120,000; Full time

Job summary

First Horizon Bank is seeking a hands-on Data Security & Insider Risk Analyst to protect sensitive information across Microsoft 365, endpoints, and other platforms. You will investigate DLP, insider risk, and endpoint events while tuning Purview policies and workflows to reduce risk.

The ideal candidate is analytical, curious, and can translate security data into actionable controls, with strong communication for confidential investigations and cross-team collaboration.

Qualifications

• Experience in information security, data protection, security operations, incident response, or related discipline.
• Knowledge of DLP concepts, data classification, insider risk, and exfiltration paths.
• Ability to investigate alerts using evidence from users, devices, apps, email, logs.
• Experience configuring/tuning security policies, detections, or alerting logic in an enterprise.
• Strong analytical and problem-solving skills and clear written/verbal communication.
• Ability to manage multiple investigations with accurate case documentation.

Responsibilities

• Monitor, triage, investigate, and respond to DLP, insider risk, and endpoint alerts/incidents.
• Document findings with business context and coordinate containment/remediation.
• Tune Purview DLP policies, rules, information types, classifiers, thresholds, and notifications.
• Support DLP controls across Exchange, SharePoint, OneDrive, Teams, endpoints, and cloud apps.
• Review false positives/negatives and implement policy improvements.
• Support Purview Insider Risk Management policies, alerts, and investigations.
• Collaborate with identity, security, HR, IR teams during investigations and control changes.
• Leverage Purview, Defender, SIEM/SOAR, and telemetry to build timelines and validate findings.
• Create dashboards and trend analyses showing incident volume, policy effectiveness, and gaps.
• Develop and maintain procedures, playbooks, tuning standards, and knowledge articles.
• Participate in testing, change management, and phased deployment of data protections.
• Identify opportunities for automation and workflow integration to improve response speed.

Skills

DLP concepts

Insider risk

Security policy tuning

Threat analysis

Incident response

Analytical thinking

Communication skills

Case management

Tools

Microsoft Purview

Microsoft Defender

SentinelOne

Splunk SIEM

Power BI

Tableau

SQL

Excel

Kusto (KQL)

Job description

First Horizon Bank is seeking a hands-on Data Security & Insider Risk Analyst to protect sensitive information across Microsoft 365, endpoints, and other platforms. You will investigate DLP, insider risk, and endpoint events while tuning Purview policies and workflows to reduce risk.

The ideal candidate is analytical, curious, and can translate security data into actionable controls, with strong communication for confidential investigations and cross-team collaboration.