Data Loss Prevention Analyst

International Paper•Memphis, TN

19h•$75,000 - $89,000•Onsite

About The Position

This role involves managing day-to-day Data Loss Prevention (DLP) operations across various platforms including Microsoft Purview, Microsoft Defender for Cloud Apps, and Zscaler. The analyst will be responsible for triaging and investigating DLP alerts, reviewing user and data activity, documenting findings, coordinating remediation, and escalating incidents as needed. A key part of the role includes configuring, testing, deploying, maintaining, and tuning DLP policies, sensitivity labels, and other related controls to enhance accuracy and minimize false positives. The analyst will also collaborate with various stakeholders to translate data-protection requirements into technical controls and exception processes, monitor DLP trends and control effectiveness, and communicate findings to leadership. Additionally, the role requires maintaining operating procedures, supporting user education, and contributing to continuous improvement initiatives for data classification and secure handling of sensitive information.

Requirements

Demonstrated curiosity and a desire to continuously learn emerging technologies, security capabilities, and data-protection practices.
Ability to quickly build proficiency with new tools and platforms through self-directed learning, formal training, hands-on experimentation, documentation, and feedback from teammates.
Strong interest in beginning or growing a career in cybersecurity, data protection, compliance, or information technology, supported by a willingness to take ownership of professional development.
Ability to apply critical thinking, ask thoughtful questions, follow documented processes, and seek guidance when an issue falls outside established procedures.
Receptiveness to coaching and constructive feedback, with a demonstrated commitment to improving knowledge, performance, and work quality over time.
Dependability, initiative, and follow-through in completing assigned work accurately, meeting commitments, and communicating promptly when priorities or challenges change.
Ability to work collaboratively, listen to different perspectives, share information clearly, and contribute positively within cross-functional teams.
Foundational technical aptitude demonstrated through coursework, certifications, internships, volunteer work, labs, personal projects, or other self-directed learning.
Commitment to protecting confidential information, following security and privacy requirements, and using sound judgment when handling sensitive matters.
Strong analytical, problem-solving, organizational, and time-management skills, with attention to detail and the ability to manage multiple priorities in a controlled and documented manner.
Strong written and verbal communication skills, with the ability to explain technical findings and data-protection requirements to business users, Data Champions, technical teams, Legal, Human Resources, and leadership.
Demonstrated discretion, integrity, sound judgment, customer focus, and collaboration when handling sensitive information and coordinating investigations or remediation activities.
Ability to develop and maintain standard operating procedures, knowledge articles, investigation records, control evidence, change documentation, and audit-support materials.

Nice To Haves

Two to four years of applicable work experience is preferred; prior experience in cybersecurity is preferred.
Knowledge of DLP controls across Exchange, SharePoint, OneDrive, Teams, endpoints, removable media, web uploads, cloud applications, and on-premises file repositories is preferred.
Familiarity with Microsoft Defender for Cloud Apps, Zscaler, Microsoft Defender XDR, SIEM platforms, ServiceNow, and Microsoft Purview Information Protection Scanner technologies is preferred.
Understanding of data classification, secure data handling, privacy and regulatory requirements, incident response, and the protection of personal, financial, customer, and confidential business information.
Microsoft Security, Compliance, and Identity Fundamentals; Microsoft Information Protection and Compliance Administrator; Security+; or a comparable security, privacy, or compliance certification is preferred.
Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, Risk Management, or a related field, or equivalent relevant work experience.

Responsibilities

Manage day-to-day Data Loss Prevention operations across Microsoft Purview, Microsoft Defender for Cloud Apps, Zscaler, and related monitoring platforms.
Triage and investigate DLP alerts, review user and data activity, document findings, coordinate remediation, and escalate suspected data-loss incidents to Incident Response, Legal, Human Resources, or other stakeholders as appropriate.
Configure, test, deploy, maintain, and tune DLP policies, sensitivity labels, sensitive information types, endpoint controls, exception groups, and automated protection rules to improve accuracy and reduce false positives.
Partner with Data Champions, data owners, Information Security, Legal, Privacy, IT support teams, and business stakeholders to translate data-protection requirements into practical technical controls and approved exception processes.
Monitor DLP trends and control effectiveness; compile recurring metrics on alert volume, removable-media activity, label changes, sensitive-data discovery, high-activity policies, and user behavior; and communicate findings and recommendations to program leadership.
Maintain operating procedures, policy documentation, knowledge articles, incident records, control evidence, and audit support materials in accordance with Information Security and compliance requirements.
Support user education, targeted outreach, testing, change management, and continuous improvement initiatives that promote accurate data classification and secure handling of sensitive information.