InsiderRisk L2 Data Protection Analyst

POSITION RESPONSIBILITIES

Percent of Time

Monitoring & Alert Handling

o Monitor data protection dashboards and alert queues for policy violations or anomalous activity.

o Conduct preliminary analysis on triggered alerts and apply standard operating procedures to determine severity.

Incident Triage & Escalation

o Validate alerts, gather relevant logs or evidence, and escalate incidents when necessary.

o Document incident details clearly in ticketing or incident management systems.

Collaboration & Reporting

o Work closely with team members to address inquiries or provide updates on active alerts.

o Generate basic daily and weekly reports on DLP alerts and incidents.

Policy Awareness

o Maintain understanding of basic data protection policies and procedures.

o Provide initial feedback on policy effectiveness based on recurring alerts.

100%

ORGANIZATIONAL RELATIONSHIPS

Reports to ZICC Data Protection Lead

Collaborate with peer ZICC Data Protection Analysts

Data Protection Service Lead (US)

Sr. Data Protection Analyst team (US)

Insider Threat Investigations Manager (US)

EDUCATION AND EXPERIENCE

Education

University Degree in Computer Science or Information Systems is required

MS or advanced identity courses or other applicable certifications is desirable, including:

o Certified Information Systems Security Professional (CISSP)

Experience

A minimum of 4+ years of relevant experience in Information Security focusing preferably working with data loss protection (DLP) technologies or in a SOC environment.

Expertise in Netskope CASB and Symantec DLP is desirable.

Experience working with global teams across multiple time zones.

Demonstrated ability to work within diverse technical teams.

TECHNICAL SKILLS REQUIREMENTS

Proficiency in data protection tools (e.g., Netskope, Symantec, Microsoft, etc.)

Solid understanding of Windows, macOS, and/or Linux environments

Familiarity with SIEM products, ticketing systems, and incident response workflows

Ability to identify indicators of compromise (IOCs) and malicious behaviors

Capable of driving root cause analysis and coordinating remediation

Pharmaceutical or other regulated industry experience is desirable

Must be fluent in both written and spoken English, with the ability to communicate effectively across technical and non-technical audiences

PHYSICAL POSITION REQUIREMENTS

Availability to work between 1pm IST to 10pm IST hours (minimum 3 hours of daily overlap with US ET Time zone)

Full time