Senior Analyst - Data Protection (Remote)

United Airlines•Chicago, IL

7d•$112,480 - $146,540•Remote

About The Position

Connecting People. Uniting the World. There’s never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world — with millions of customers and tens of thousands of employees — we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly. We’re on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations. United offers a competitive benefits package aimed at keeping you happy, healthy, and well-traveled. From employee-run "Business Resource Group" communities to world-class benefits like parental leave, 401(k), and privileges like space-available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today!

Requirements

Bachelor's degree required (Cybersecurity, Information Technology, Computer Science related majors preferred)
3+ years in STEM-related field
Strong understanding of data protection principles, such as data classification, data lifecycle, and data exposure risks
Experience designing and implementing data protection controls (i.e., DLP, endpoint controls, cloud data protection)
Ability to assess and reduce data exposure across modern environments (M365, endpoints, cloud collaboration platforms)
Familiarity with data classification approaches, including automated or semantic-based methods
Understanding of data movement patterns and exfiltration techniques across enterprise environments
Ability to evaluate control effectiveness and identify gaps based on real-world usage and risk scenarios
Experience working with cross-functional partners (Legal, HR, Technology) to align controls with business needs and policy requirements
Strong analytical and problem-solving skills with ability to translate risk into practical, scalable controls
Effective communication skills to clearly articulate risks, control gaps, and recommendations to both technical and non-technical stakeholders
Must be legally authorized to work in the United States for any employer without sponsorship
Successful completion of interview required to meet job qualification
Reliable, punctual attendance is an essential function of the position

Nice To Haves

Master's degree
Relevant certifications like CISSP, CISA, CIPP, CIPT, CISM
Hands-on experience with DLP platforms, data classification tools, or data security posture solutions
Familiarity with Microsoft Purview / M365 data protection capabilities
Experience implementing or supporting controls related to AI / Generative AI usage (i.e., data exposure in prompts, output handling, usage governance)
Knowledge of endpoint data protection and monitoring technologies
Experience tracking or reporting on data protection KPIs (i.e., data visibility, classification coverage, protected data)
Understanding of how data protection and insider threat detection align to reduce overall risk

Responsibilities

Design and deploy data protection controls across key platforms (M365, endpoints, cloud) to prevent unauthorized data exposure. Focus on effectiveness, usability, and alignment to business workflows.
Drive improvements in data classification coverage and visibility using automated and semantic approaches. Ensure sensitive data is accurately identified and protected at scale
Define and implement controls to govern the use of AI and emerging technologies, ensuring protection of sensitive data in prompts, outputs, and integrations.
Assess data exposure risks across enterprise environments and prioritize remediation actions that reduce real-world risk, beyond traditional egress-only models.
Partner with Insider Threat and Cyber teams to ensure alignment between detection signals and preventative controls, improving overall effectiveness of risk mitigation.
Partner with Legal, HR, and business teams to ensure controls align with policy, regulatory requirements, and operational needs.