Data Protection Analyst

Role & responsibilities

Own and drive the organizations data protection strategy across data at rest, in motion, and in use

• Define and govern data protection capabilities across: Data discovery and visibility, Data classification and labeling, Data access governance and exposure management, Data loss prevention and policy enforcement, Insider risk and misuse detection, Cloud and SaaS data protection (DSPM)

• Design and oversee end-to-end data protection architectures across on-prem, hybrid, and cloud environments

• Lead implementation and integration of data protection platforms such as: o Microsoft Purview (Information Protection, DLP, Insider Risk, Records Management) o Varonis (data discovery, permissions analysis, insider risk, automation) o Cyera or other DSPM platforms (cloud data discovery, risk posture, exposure analysis)

• Ensure consistent policy models across email, collaboration tools, endpoints, cloud storage, databases, and SaaS applications

• Experience applying AI/ML or generative AI to enhance data protection capabilities, such as intelligent data classification, risk prioritization, anomaly detection, or insider risk analysis

• Experience designing or leveraging AI-assisted workflows for data protection operations, including alert triage, investigation support, policy tuning, and automation of repetitive tasks

• Establish and manage operational processes for data protection monitoring, alert triage, investigation, and response

• Ability to communicate data risk and protection posture to technical and non-technical stakeholders

• Define escalation paths and coordinate with SOC, IR, Legal, HR, and Compliance teams

• Lead, mentor, and develop a team of data protection analysts and engineers

• Set clear goals, priorities, and performance expectations for the team • Support hiring, onboarding, and ongoing skills development across data protection domains

• Strong experience across multiple data protection domains, including data discovery, classification, access governance, DLP, insider risk, and cloud data protection

• Solid understanding of the data lifecycle from creation to disposal