Data Loss Prevention Analyst

Position Title:
Data Loss Prevention Analyst
Pay Rate:
$75,000-$89,000 per year
Multiple factors, including Individual experience, skills and abilities will determine where an employee is ultimately placed in the pay range.
Location:
International Paper
6400 Poplar Ave
Memphis, TN 38197
The Job You Will Perform:
Manage day-to-day Data Loss Prevention operations across Microsoft Purview, Microsoft Defender for Cloud Apps, Zscaler, and related monitoring platforms.
Triage and investigate DLP alerts, review user and data activity, document findings, coordinate remediation, and escalate suspected data-loss incidents to Incident Response, Legal, Human Resources, or other stakeholders as appropriate.
Configure, test, deploy, maintain, and tune DLP policies, sensitivity labels, sensitive information types, endpoint controls, exception groups, and automated protection rules to improve accuracy and reduce false positives.
Partner with Data Champions, data owners, Information Security, Legal, Privacy, IT support teams, and business stakeholders to translate data-protection requirements into practical technical controls and approved exception processes.
Monitor DLP trends and control effectiveness; compile recurring metrics on alert volume, removable-media activity, label changes, sensitive-data discovery, high-activity policies, and user behavior; and communicate findings and recommendations to program leadership.
Maintain operating procedures, policy documentation, knowledge articles, incident records, control evidence, and audit support materials in accordance with Information Security and compliance requirements.
Support user education, targeted outreach, testing, change management, and continuous improvement initiatives that promote accurate data classification and secure handling of sensitive information.
The Qualifications, Skills and Knowledge You Will Bring:
The qualifications, skills, and knowledge listed below are preferred and will help a candidate succeed in the role, but they are not required for consideration.
Demonstrated curiosity and a desire to continuously learn emerging technologies, security capabilities, and data-protection practices.
Ability to quickly build proficiency with new tools and platforms through self-directed learning, formal training, hands-on experimentation, documentation, and feedback from teammates.
Strong interest in beginning or growing a career in cybersecurity, data protection, compliance, or information technology, supported by a willingness to take ownership of professional development.
Ability to apply critical thinking, ask thoughtful questions, follow documented processes, and seek guidance when an issue falls outside established procedures.
Receptiveness to coaching and constructive feedback, with a demonstrated commitment to improving knowledge, performance, and work quality over time.
Dependability, initiative, and follow-through in completing assigned work accurately, meeting commitments, and communicating promptly when priorities or challenges change.
Ability to work collaboratively, listen to different perspectives, share information clearly, and contribute positively within cross-functional teams.
Foundational technical aptitude demonstrated through coursework, certifications, internships, volunteer work, labs, personal projects, or other self-directed learning.
Two to four years of applicable work experience is preferred; prior experience in cybersecurity is preferred.
Commitment to protecting confidential information, following security and privacy requirements, and using sound judgment when handling sensitive matters.
Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, Risk Management, or a related field, or equivalent relevant work experience.
Knowledge of DLP controls across Exchange, SharePoint, OneDrive, Teams, endpoints, removable media, web uploads, cloud applications, and on-premises file repositories is preferred.
Familiarity with Microsoft Defender for Cloud Apps, Zscaler, Microsoft Defender XDR, SIEM platforms, ServiceNow, and Microsoft Purview Information Protection Scanner technologies is preferred.