Data Security Posture Management (DSPM) Analyst

KeyBank; United States; Hybrid; USD 69,000 - 105,000; Full time

Job summary

KeyBank is seeking a Data Security Posture Management Analyst in the United States to join a team modernizing data protection processes. You will help define requirements, support DSPM implementations, and foster sustainable governance for sensitive data across enterprise systems.

The role emphasizes cross-functional collaboration with business, legal, risk, and technology teams, with progression toward data security operations and ongoing risk remediation.

Qualifications

• Analytical thinking and problem solving.
• Proficiency with data security tools and office software.
• Strong written and verbal communication in a cross-functional environment.
• Ability to support projects within scope, budget, and timeline.

Responsibilities

• Develop and refine data security posture management processes across systems and business processes.
• Elicit business needs, define scope, and translate objectives into detailed requirements for DSPM implementations.
• Coordinate cross-functional sessions with business, legal, technology, risk, and data stakeholders.
• Partner with technology teams to align system design with business requirements for sustainable data security operations.
• Support testing and QA to ensure workflow and control capabilities meet requirements.
• Assist data asset owners in remediation tracking and documenting outcomes.
• Analyze recurring issues and stakeholder feedback to drive process improvements in DSPM.

Skills

Analytical thinking

Visio

Miro

Microsoft Word

Microsoft Excel

PowerPoint

Team player

Communication skills

Project support

Organizational skills

Tools

Visio

Miro

Microsoft Word

Microsoft Excel

PowerPoint

Job description

Location: 4910 Tiedeman Road, Brooklyn Ohio

This Data Security Posture Management Analyst position will join a team responsible for modernizing the processes, controls, and technologies used to identify, retain, and protect sensitive data across the enterprise. Initially, the analyst will be fully dedicated to supporting the implementation of the Data & Retention Program, with a focus on helping define, operationalize, and refine new data security posture management capabilities. In this role, the analyst will partner with business, technology, legal, risk, and data stakeholders to translate program objectives into clear requirements, support technology implementation, and help build sustainable processes for governing sensitive data risks and remediation activities. The analyst is expected to help drive the development and ongoing improvement of data security processes and technologies by documenting requirements, coordinating cross-functional working sessions, supporting testing and implementation, monitoring compliance outcomes, and assisting data asset owners in resolving identified data security issues. Over time, this role is expected to transition into a data security operations role responsible for helping ensure sensitive data is handled securely, consistently, and in accordance with applicable data security standards and control requirements.

Essential Job Functions

• Help develop, document, and refine data security posture management processes for identifying, retaining, protecting, and governing sensitive data across applicable systems and business processes.
• Support implementation of new DSPM technologies and capabilities by eliciting business needs, defining scope, documenting detailed requirements, and translating program objectives into actionable technology and process requirements.
• Coordinate and facilitate cross-functional working sessions with business, legal, technology, risk, and data stakeholders to align on requirements, control expectations, remediation approaches, and operational procedures.
• Partner with technology teams to ensure system design, configuration, enhancements, and user experience support business requirements and enable sustainable data security operations.
• Support Quality Assurance Services and user acceptance testing activities to validate that system requirements, workflows, reporting, and control capabilities are tested accurately and comprehensively.
• Act as a subject matter resource for supported DSPM processes and technologies, helping stakeholders understand system capabilities, process expectations, and data security control requirements.
• Govern remediation of non-compliance with data security requirements and standards, including tracking violations, monitoring remediation progress, identifying process gaps, and escalating issues as appropriate.
• Assist data asset owners in understanding identified violations, evaluating remediation options, selecting an appropriate path to compliance, and documenting outcomes in alignment with program expectations.
• Analyze recurring issues, stakeholder feedback, testing results, and remediation trends to recommend improvements to DSPM processes, standards, reporting, and technology-enabled workflows.
• Understand security, risk management, data governance, and IT process principles, and engage or elevate to appropriate teams when additional review, decisioning, or risk acceptance is required.
• Transition toward ongoing data security operations responsibilities focused on ensuring the secure handling, protection, retention, and appropriate use of sensitive data across governed processes and systems.

Required Skills

• Analytical Skills; critical thinking, creative thinking, and problem solving.
• Visio/Miro, Word, Excel and PowerPoint
• Work within a customer oriented, positive team environment
• Demonstrate strong interpersonal, verbal, and written communication skills with technical and non-technical staff
• Provide support on single projects and initiatives within scope, budget and timeline
• Organization and communication skills

COMPENSATION AND BENEFITS

This position is eligible to earn a base salary in the range of $69,000.00 - $105,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

Job Posting Expiration Date: 10/04/2026

KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard t