Data Protection Systems Analyst

DFW International Airport•Grapevine, TX

About The Position

Under the direction of the Assistant Manager, Records & Information, the Data Protection Systems Analyst develops the organization’s data security posture management (DSPM) and data loss prevention (DLP) capabilities across cloud and on-premises environments. The role administers, configures, monitors, and improves DSPM and DLP platforms to protect sensitive data, support compliance, and reduce risk by discovering, classifying, and monitoring data across cloud, endpoint, application, and repository environments. It also supports electronic records management, workflows, forms, metadata, retention, permissions, and repository administration, promoting secure, compliant, and efficient information handling throughout the organization. The analyst works with data security platforms to discover, classify, and monitor information across SaaS, Azure, application environments, endpoints, and repositories. The role maintains security posture dashboards, metrics, reporting, and service-level tracking; supports least-privilege access and secure data lifecycle practices; and coordinates posture reviews, risk assessments, findings, and corrective action plans with the Assistant Manager, Records & Information. The position administers and optimizes DLP solutions, develops and refines classifiers, rules, labels, alerts, and groups across email, endpoint, cloud application, web, and network channels, and establishes incident workflows. It triages alerts, investigates user activity, coordinates incident response, and delivers user awareness training and enablement. The analyst also designs and maintains electronic records management workflows, business processes, forms, document routing, retention actions, metadata capture, and application integrations. The role aligns configurations with classification schemes, retention schedules, legal holds, and privacy requirements, and monitors repository health, permissions, metadata, and performance while assisting with upgrades, patches, and environment changes. Other related duties may be assigned.

Requirements

Bachelor’s degree in information security, information systems, or equivalent experience.
Three years of information security experience, including direct experience in data loss prevention and data security posture management administration and design.
Experience in the public sector or regulated industries; familiarity with retention schedules and legal data, information, or record requirements.
Familiarity with DSPM capabilities, including data discovery, classification, lineage, access analysis, misconfiguration detection, and remediation workflows.
Knowledge of the Microsoft 365 security stack, such as Purview, Sensitivity Labels, eDiscovery, Insider Risk, Defender Suites, and Symmetry DataGuard.
Knowledge of cloud security in Azure or AWS, Azure AD/Entra identity, and zero-trust principles.
Knowledge of scripting and automation for policy deployment, integrations, and reporting.
Knowledge of access control, encryption, data lifecycle, privacy, and records management concepts.
Skill in analytics, documentation, communication, and problem-solving.
Ability to collaborate across departments and organizational levels, including technical teams, business units, records management, legal, audit, and cybersecurity stakeholders.
Must obtain a Security Identification Display Area (SIDA) Airport Identification/Access Badge within 30 days of employment in accordance with TSA requirements and DFW Airport’s Airport Security Program, and maintain qualification at each badge renewal.
Ability to obtain and maintain an FBI Criminal Justice Information System (CJIS) clearance.
Any equivalent combination of education and/or experience may be substituted for the stated education and experience requirements.

Nice To Haves

Practical experience with electronic content management system (ECM) workflow design, forms, repository administration, security and permissions, and integrations.
Security certification such as CCSK, CCSP, Security+, or a data/privacy credential such as CDPSE, CIPM, or CIPP.
Laserfiche certification, such as Laserfiche Certified Professional, or equivalent vendor training.

Responsibilities

Discover, classify, and continuously monitor data across SaaS, Azure, application environments, endpoints, and repositories using DSPM and DLP applications.
Maintain dashboards, metrics, and reporting on security posture, trends, and SLAs, and provide guidance on least-privilege access and secure data lifecycle practices.
Coordinate posture reviews and risk assessments, document findings, track closure, and develop corrective action plans with the Assistant Manager, Records & Information.
Administer and optimize DLP solutions, including platforms such as Symmetry DataGuard and Microsoft Purview.
Create, test, and refine DLP classifiers, rules, labels, alerts, and groups across email, endpoints, cloud applications, web, and network channels; reduce false positives and improve coverage.
Establish DLP incident response workflows, triage alerts, investigate user activity, and coordinate response with the Assistant Manager, Records & Information.
Conduct user awareness training and provide job aids and enablement for responsible data handling.
Design, build, and maintain workflows, business processes, forms, automated document routing and processes, retention actions, metadata capture, and application integrations.
Align electronic records management configurations with classification schemes, retention schedules, legal holds, and privacy requirements.
Monitor repository health, permissions, metadata, and performance, and assist with upgrades, patches, and environment changes.
Perform other related duties as assigned.