Cybersecurity Analyst

The Shepherd Companies • Norwood, OH

8d

About The Position

The Shepherd Material Science Company is seeking a hands-on Cybersecurity Analyst to operate and mature its data loss prevention and application security program across Shepherd Chemical, Shepherd Color, Glass Coatings & Concepts LLC, and Shepherd Mirecourt SAS. The role administers Microsoft Purview controls, assesses enterprise applications, investigates security events, and helps colleagues handle sensitive information appropriately. The position is intended for someone who will build and improve the data protection program and serve as a practical partner to the business.

The analyst supports information protection, application security, incident response, awareness, and compliance. This includes managing Microsoft 365 data protection controls aligned with Shepherd’s classification model, assessing application and vendor risks, triaging security alerts, assisting with incidents and audits, supporting GDPR controls for Shepherd Mirecourt SAS, and recommending security improvements to the IS Applications and Data Manager. Travel to local Shepherd sites may be required as business needs require.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent relevant experience.
• Three or more years of information security experience, including at least one year of hands-on DLP or data protection work.
• Working experience with Microsoft Purview DLP, Information Protection, and sensitivity labels in a Microsoft 365 E3 or E5 environment.
• Familiarity with Microsoft Entra ID, conditional access, and single sign-on concepts.
• Ability to assess security and risk across SaaS platforms, cloud services, endpoints, networks, email systems, and third-party providers using industry-standard reports and frameworks.
• Working knowledge of NIST Cybersecurity Framework 2.0 and ISO/IEC 27001 concepts.
• Clear written and verbal communication skills, including the ability to explain a blocked email or security finding to a nontechnical colleague without jargon.

Nice To Haves

• Microsoft SC-401 or SC-200, CompTIA Security+ or CySA+, ISC2 SSCP, CISSP, or a similar certification.
• Experience with the Microsoft Defender suite.
• Exposure to SAP S/4HANA data and authorization concepts, Power BI, or Power Platform governance.
• Understanding of GDPR, ITAR, or trade-secret protection in a manufacturing environment.
• PowerShell or KQL scripting experience for alert analysis, automation, and reporting.

Responsibilities

• Administer and maintain Microsoft Purview DLP policies across the Shepherd Microsoft 365 environment, aligned with the Public, Internal, Confidential, and Highly Confidential classification model.
• Configure and tune sensitivity labels and sub-labels for HR, Financial, Customer, NDA Register, Formulations, ITAR, and Legal information.
• Expand auto-labeling for financial patterns, personally identifiable information, customer pricing, and chemical formulation identifiers.
• Monitor SAP data exported to Excel, Power BI, and SQL Server extracts to confirm appropriate labeling and storage in approved locations.
• Enforce Microsoft 365 Copilot and Azure AI data boundaries under Shepherd’s AI Acceptable Use Policy, including restrictions for Highly Confidential and Formulations data.
• Optimize controls, rules, and detection logic to reduce false positives while minimizing disruption to legitimate work.
• Produce monthly security operations and data protection metrics to support risk-based decisions and continuous improvement.
• Conduct security and risk assessments for new application requests, evaluating data classification, Microsoft Entra ID single sign-on, SOC 2 Type II controls, data residency, and integration risks.
• Support vendor security assessments, including SOC 2 review and exception documentation for Tier 1 vendors.
• Detect and investigate non-approved applications, services, and technologies; assess risk and drive policy-aligned corrective action.
• Review application access and permissions for alignment with least-privilege and core identity and access management controls.
• Close findings from the September 30, 2026 existing-application review and support the annual application portfolio review.
• Help govern data across its lifecycle, from classification and protection through retention and secure destruction.
• Triage alerts across data protection, identity, email, network, and endpoint security platforms; document findings, remediation actions, and escalations.
• Serve as a first responder for cybersecurity incidents by scoping impact, coordinating containment, documenting response actions, and recommending corrective measures.
• Coordinate with the IS Infrastructure team and Red Canary MDR when incidents extend into endpoint or network threats.
• Create practical data-handling training and job aids to complement CyberAware training.
• Support cybersecurity audits, customer security reviews, third-party risk assessments, evidence collection, and security questionnaires.
• Support GDPR controls for Shepherd Mirecourt SAS, including Microsoft Purview data-residency configurations required by the France/EU Supplement.
• Track security trends, Microsoft Secure Score, Microsoft Purview roadmap changes, and emerging data-exfiltration risks; recommend improvements to the IS Applications and Data Manager.
• Travel to local Shepherd sites as business needs require.

What This Job Offers

• Job Type: Full-time