Data Protection Associate

DTCC • Jersey City, NJ

3h • $45,000 - $90,000 • Hybrid

About The Position

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

Being a member of IT Cybersecurity & Platform Engineering team, the Data Protection Operations Assocaite is responsible for the day‑to‑day operation of DTCC’s data protection controls, with primary focus on triaging alerts, investigating data risk signals, managing exceptions and supporting remediation across DTCC's Data Protection technologies including DLP, CASB and DSPM.

This role sits in the first line of defense and serves as a key operational interface between security tooling, business users, and IT partners. The Analyst must combine strong analytical judgment with clear communication skills to assess risk, engage stakeholders, and drive timely resolution of data protection issues, while maintaining a consistent and professional user experience.

Requirements

• Min 3 years of relevant experience
• Bachelor’s Degree and/or equivalent experience
• 3–5+ years in security operations, data protection operations, SOC, or cloud security roles.
• Experience triaging alerts and investigations from security or data protection platforms.
• Working familiarity with technical controls and concepts including Data Loss Prevention, Cloud and SaaS security, Data discovery, classification, and exposure risk.
• Strong analytical and judgment skills, with the ability to assess data risk in real‑world business contexts.
• Excellent written and verbal communication skills.
• Prior experience engaging business users and application teams on security or data risk topics.
• Comfort working in a regulated or highly controlled environment

Responsibilities

• Monitor, triage, and investigate alerts and findings from DSPM platforms (e.g., sensitive data discovery, exposure findings, excessive access), CASB / cloud security tools (unsanctioned SaaS usage, risky data sharing), and DLP controls (email, endpoint, web, SaaS, and AI‑related channels).
• Assess alerts for severity, credibility, and business impact, distinguishing true data risk from false positives.
• Prioritize and process alerts in line with defined SLAs and escalation criteria.
• Analyze DSPM findings, engage data owners, application teams, and IT partners to validate findings, recommend and track remediation actions (access reduction, secure configuration, reclassification).
• Support remediation lifecycle through closure, documenting outcomes and residual risk.
• Investigate CASB alerts related to Unsanctioned or high‑risk SaaS usage, Cloud data sharing patterns that may introduce exposure.
• Investigate DLP events.
• Execute defined response actions, escalate complex cases to Tier 2 engineering or incident response teams as required.
• Serve as a primary operational point of contact for business and IT stakeholders on data protection issues.
• Communicate findings clearly and professionally to non‑technical audiences, explaining what was detected, why it matters, and what actions are required.
• Balance risk reduction with user experience, avoiding unnecessary friction that could drive control bypass.
• Identify recurring alert patterns, false positives, and operational gaps across DSPM, CASB, and DLP tools.
• Provide structured feedback to Content Engineering and Engineering teams to support rule tuning and control enhancements.
• Contribute to improvements in operational runbooks, workflows, and triage consistency.
• Maintain accurate, audit‑ready case documentation for all investigations and remediation activities.
• Support production of operational metrics.
• Assist with internal reviews, audit requests, and regulatory evidence gathering as a first‑line owner.

Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level