
Data Privacy Analyst
EXL
full-time
Posted on:
Location Type: Remote
Location: United States
Visit company websiteExplore more
About the role
- Console Vigilance: Monitor the DSPM dashboard for alerts tagged as PHI, HIPAA, or ePHI.
- Data Discovery Audit: Review newly discovered data stores to ensure they are properly classified
- Shadow Data Hunting: Identify "Shadow PHI"—sensitive health data residing in unmanaged or unauthorized locations (e.g., a developer's personal S3 bucket or a "test" folder).
- Sensitivity Assessment: Differentiate between De-identified data (low risk) and Individually Identifiable Health Information (High/Critical risk).
- Exposure Analysis: Determine the "blast radius." Is the PHI accessible to the public internet, or is it "sprawled" but still within the internal network?
- False Positive Filtering: Dismiss alerts where the "Sensitive Data PHI" is actually synthetic test data or public health statistics that do not fall under policy or regulatory classification
- Policy Enforcement: Check if the data location complies with the policy
- Reporting: Assist the Privacy Officer by providing technical evidence for monthly HIPAA compliance audits.
- Act as Level 1 support to monitor DSPM solution
- Managing day to day data privacy operation
- Work on predefined processes that defined processes that what and how the activities to be performed.
- Liaise with other team member to investigate the issues.
- Ensure smooth operations while on shift and address any issues, or questions from analyst and stakeholders.
- Research and escalate potential threats to clients for remediation or incident response based EXL processes.
Requirements
- Bachelor’s degree in information technology
- Basic knowledge of Data Privacy and DSPM operations would be preferred.
Benefits
- EXL never requires or asks for fees/payments or credit card or bank details during any phase of the recruitment or hiring process
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
data privacyDSPM operationsdata classificationsensitivity assessmentexposure analysisfalse positive filteringpolicy enforcementHIPAA compliancedata discovery auditshadow data hunting
Soft Skills
communicationproblem-solvingteam collaborationattention to detailorganizational skillsincident responsetechnical reportingsupportresearchescalation