Cybersecurity Analyst - Data Protection, Privacy & Risk
About The Position
We're looking for a Cybersecurity Analyst to join our Information Security team and help strengthen our data protection, privacy, and governance capabilities. In this role, you'll play a critical part in safeguarding sensitive information, supporting privacy operations, monitoring data risks, and helping ensure compliance with regulatory and security requirements. This position is ideal for someone who is analytical, detail-oriented, and passionate about understanding how data moves throughout an organization. You'll collaborate with Security, Legal, HR, and IT teams to identify risks, support investigations, and continuously improve our security and privacy programs.
Requirements
- Bachelor's degree or equivalent experience.
- 3+ years of experience in cybersecurity, privacy, data protection, risk management, or a related field.
- Experience with security monitoring, DLP, endpoint security, investigations, or risk assessment activities.
- Familiarity with privacy regulations such as GDPR, CCPA, or HIPAA.
- Strong analytical, organizational, and problem-solving skills.
- Ability to communicate effectively with both technical and non-technical audiences.
- Demonstrated ability to manage sensitive information with professionalism and discretion.
Nice To Haves
- Security+, CIPP/US, CIPP/E, CISSP, CRISC, or similar certifications.
- Experience with Microsoft Purview (DLP, Insider Risk, eDiscovery)
- Experience with CrowdStrike or similar EDR platforms
- Experience with Google SecOps or other SIEM solutions
- Experience with Netskope, Zscaler, or other SaaS security platforms
- Experience with Okta, SailPoint, or identity governance tools
- Experience with ServiceNow or similar case management platforms
Responsibilities
- Monitor and investigate alerts from data protection and security tools, including DLP, endpoint, and SaaS platforms.
- Analyze user and data activity to identify unusual behavior, potential policy violations, and elevated risk scenarios.
- Support internal reviews and investigations by gathering logs, evidence, and relevant contextual information.
- Drive continuous improvement of DLP policies and detection rules by identifying trends, reducing false positives, and enhancing monitoring effectiveness.
- Partner with Legal, HR, and other stakeholders on sensitive data protection matters while maintaining confidentiality and professionalism.
- Support Data Subject Access Requests (DSARs), including intake, tracking, documentation, and fulfillment activities.
- Maintain data inventories, data flow maps, and records of processing activities (RoPAs).
- Assist with privacy notices, consent management, and regulatory compliance activities.
- Support privacy reviews of vendor and third-party agreements to ensure appropriate data protection controls are in place.
- Support internal control assessments, audits, and remediation tracking activities.
- Help maintain security policies, standards, and procedures aligned with industry frameworks such as NIST CSF, ISO 27001, and SOC 2.
- Assist with third-party risk assessments, vendor reviews, and risk scoring activities.
- Participate in control testing and audit preparation efforts.
Benefits
- Comprehensive benefit plans
- Retirement, savings, tuition reimbursement, and employee incentive programs
- Resources for mental, physical, and financial wellbeing
- LinkedIn Learning access
- Internal opportunities to work on projects cross-company
- Four employee-led and self-directed Business Resource Groups
- Paid volunteer day annually
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
Associate degree
