Security Analyst

• Design, implement, and manage the end-to-end DLP control to protect sensitive data across endpoints, cloud, email, network, and mobile environments according to identified requirements, developed milestones, and approved program.
• Develop and expand DLP policies, rules, and controls to align with evolving business needs, regulatory requirements, and industry best practices.
• Continuously improve and optimize DLP processes to enhance accuracy, reduce false positives, and improve efficiency.
• Support the expansion of DLP capabilities into emerging technologies, and egress channels.
• Follow the DLP incident response process, collaborating with all stakeholders (i.e., HR, Privacy, and Business Units) to investigate, contain, and remediate data loss incidents.
• Develop and maintain DLP incident playbooks and ensure timely response to alerts.
• Provide detailed analysis and reporting on data loss incidents, root causes, and corrective measures.
• Conduct post-incident reviews and recommend improvements to prevent future incidents.
• Establish, enforce, and regularly review DLP policies, standards, and guidelines to ensure comprehensive coverage of sensitive data across the organization.
• Collaborate with Legal, Compliance, Risk, and other departments to ensure DLP policies align with regulatory requirements (e.g., GDPR, PIPEDA, PCI-DSS, HIPAA) and industry frameworks.
• Define, track, and report on key performance indicators (KPIs) and other DLP metrics to measure control effectiveness and risk posture.
• Develop and deliver DLP awareness and training programs to educate employees on the importance of data protection, acceptable use policies, and secure data handling practices.
• Evaluate and implement new DLP technologies, tools, and enhancements to strengthen data protection capabilities.
• Regularly assess the effectiveness of DLP controls through testing, audits, and continuous monitoring. Report identified DLP gaps and drive initiatives to close them.

Information Security Analyst 3, Data Loss Prevention

Cyber Security Analyst – Governance, Risk & Compliance