Data Security Posture Management (DSPM) Analyst

KeyBank • Brooklyn, OH

1d • $69,000 - $105,000 • Hybrid

About The Position

This Data Security Posture Management Analyst position will join a team responsible for modernizing the processes, controls, and technologies used to identify, retain, and protect sensitive data across the enterprise. Initially, the analyst will be fully dedicated to supporting the implementation of the Data & Retention Program, with a focus on helping define, operationalize, and refine new data security posture management capabilities. In this role, the analyst will partner with business, technology, legal, risk, and data stakeholders to translate program objectives into clear requirements, support technology implementation, and help build sustainable processes for governing sensitive data risks and remediation activities. The analyst is expected to help drive the development and ongoing improvement of data security processes and technologies by documenting requirements, coordinating cross-functional working sessions, supporting testing and implementation, monitoring compliance outcomes, and assisting data asset owners in resolving identified data security issues. Over time, this role is expected to transition into a data security operations role responsible for helping ensure sensitive data is handled securely, consistently, and in accordance with applicable data security standards and control requirements.

Requirements

• Analytical Skills; critical thinking, creative thinking, and problem solving.
• Visio/Miro, Word, Excel and PowerPoint
• Work within a customer oriented, positive team environment
• Demonstrate strong interpersonal, verbal, and written communication skills with technical and non-technical staff
• Provide support on single projects and initiatives within scope, budget and timeline
• Organization and communication skills

Responsibilities

• Help develop, document, and refine data security posture management processes for identifying, retaining, protecting, and governing sensitive data across applicable systems and business processes.
• Support implementation of new DSPM technologies and capabilities by eliciting business needs, defining scope, documenting detailed requirements, and translating program objectives into actionable technology and process requirements.
• Coordinate and facilitate cross-functional working sessions with business, legal, technology, risk, and data stakeholders to align on requirements, control expectations, remediation approaches, and operational procedures.
• Partner with technology teams to ensure system design, configuration, enhancements, and user experience support business requirements and enable sustainable data security operations.
• Support Quality Assurance Services and user acceptance testing activities to validate that system requirements, workflows, reporting, and control capabilities are tested accurately and comprehensively.
• Act as a subject matter resource for supported DSPM processes and technologies, helping stakeholders understand system capabilities, process expectations, and data security control requirements.
• Govern remediation of non-compliance with data security requirements and standards, including tracking violations, monitoring remediation progress, identifying process gaps, and escalating issues as appropriate.
• Assist data asset owners in understanding identified violations, evaluating remediation options, selecting an appropriate path to compliance, and documenting outcomes in alignment with program expectations.
• Analyze recurring issues, stakeholder feedback, testing results, and remediation trends to recommend improvements to DSPM processes, standards, reporting, and technology-enabled workflows.
• Understand security, risk management, data governance, and IT process principles, and engage or escalate to appropriate teams when additional review, decisioning, or risk acceptance is required.
• Transition toward ongoing data security operations responsibilities focused on ensuring the secure handling, protection, retention, and appropriate use of sensitive data across governed processes and systems.

Benefits

• Eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed