Data Security Posture Management (DSPM) Analyst

KeyBank; Kentucky; On-site; USD 69,000 - 105,000; Full time

Job summary

KeyBank is seeking a Data Security Posture Management Analyst to join a team modernizing processes and technologies to identify, retain, and protect sensitive data across the enterprise. The role focuses on defining and operationalizing new DSPM capabilities, with collaboration across business, legal, risk, and data stakeholders.

You will translate program objectives into clear requirements, support testing and implementation, monitor compliance outcomes, and help build sustainable data

Qualifications

• Experience in data security posture management and data protection.
• Ability to translate program objectives into clear requirements.
• Experience supporting testing and implementation of security programs.
• Knowledge of data governance and risk concepts.

Responsibilities

• Develop and refine DSPM processes to identify, retain, and govern sensitive data.
• Support implementation of DSPM technologies by eliciting needs and documenting requirements.
• Coordinate cross-functional sessions across business, legal, technology, risk, and data.
• Ensure system design and configurations meet business needs for data security operations.
• Support QA testing to validate requirements and controls.
• Act as SME for DSPM processes and technologies with stakeholders.
• Govern remediation of data security non-compliance and track progress.
• Assist data asset owners in evaluating remediation options toward compliance.
• Analyze recurring issues and suggest DSPM process improvements.
• Understand security, risk, governance, and IT process principles and escalate as needed.
• Transition toward ongoing data security operations responsibilities.

Skills

Analytical skills

Visio/Miro

MS Office

Communication

Teamwork

Documentation

Tools

DSPM tools

Job description

Location:

4910 Tiedeman Road, Brooklyn Ohio

This Data Security Posture Management Analyst position will join a team responsible for modernizing the processes, controls, and technologies used to identify, retain, and protect sensitive data across the enterprise. Initially, the analyst will be fully dedicated to supporting the implementation of the Data & Retention Program, with a focus on helping define, operationalize, and refine new data security posture management capabilities. In this role, the analyst will partner with business, technology, legal, risk, and data stakeholders to translate program objectives into clear requirements, support technology implementation, and help build sustainable processes for governing sensitive data risks and remediation activities. The analyst is expected to help drive the development and ongoing improvement of data security processes and technologies by documenting requirements, coordinating cross-functional working sessions, supporting testing and implementation, monitoring compliance outcomes, and assisting data asset owners in resolving identified data security issues. Over time, this role is expected to transition into a data security operations role responsible for helping ensure sensitive data is handled securely, consistently, and in accordance with applicable data security standards and control requirements.

Essential Job Functions:

• Help develop, document, and refine data security posture management processes for identifying, retaining, protecting, and governing sensitive data across applicable systems and business processes.


• Support implementation of new DSPM technologies and capabilities by eliciting business needs, defining scope, documenting detailed requirements, and translating program objectives into actionable technology and process requirements.


• Coordinate and facilitate cross-functional working sessions with business, legal, technology, risk, and data stakeholders to align on requirements, control expectations, remediation approaches, and operational procedures.


• Partner with technology teams to ensure system design, configuration, enhancements, and user experience support business requirements and enable sustainable data security operations.


• Support Quality Assurance Services and user acceptance testing activities to validate that system requirements, workflows, reporting, and control capabilities are tested accurately and comprehensively.


• Act as a subject matter resource for supported DSPM processes and technologies, helping stakeholders understand system capabilities, process expectations, and data security control requirements.


• Govern remediation of non-compliance with data security requirements and standards, including tracking violations, monitoring remediation progress, identifying process gaps, and escalating issues as appropriate.


• Assist data asset owners in understanding identified violations, evaluating remediation options, selecting an appropriate path to compliance, and documenting outcomes in alignment with program expectations.


• Analyze recurring issues, stakeholder feedback, testing results, and remediation trends to recommend improvements to DSPM processes, standards, reporting, and technology-enabled workflows.


• Understand security, risk management, data governance, and IT process principles, and engage or elevate to appropriate teams when additional review, decisioning, or risk acceptance is required.


• Transition toward ongoing data security operations responsibilities focused on ensuring the secure handling, protection retention, and appropriate use of sensitive data across governed processes and systems.

Required Skills:

• Analytical Skills; critical thinking, creative thinking, and problem solving.


• Visio/Miro, Word, Excel and PowerPoint


• Work within a customer oriented, positive team environment


• Demonstrate strong interpersonal, verbal, and written communication skills with technical and non-technical staff


• Provide support on single projects and initiatives within scope, budget and timeline


• Organization and communication skills

COMPENSATION AND BENEFITS

This position is eligible to earn a base salary in the range of $69,000.00 - $105,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing [e-mail].