Data Protection Business Analyst

=Title: Data Protection Business Analyst (Symantec DLP & Documentation)

Location: NY/NJ or BOS

Note: The DLP portion of this role is still important. We are looking for someone that has experience in reviewing DLP Incident and designing/introducing DLP policies using Symantec DLP. Location if possible NJ/NY or Boston, and for now let’s exclude candidates that would need sponsoring.

The Data Protection Analyst, will help to manage the execution of projects to include the collection of data, normalizing information where possible, performing follow ups with business owners to obtain required details, or working with internal or external resources to gather and document required information in support of project deliverables. The individual will be responsible for translating received information into standardized formats for review and updating project artifacts in a timely manner. The Data Protection Analyst will serve the following programs: Data Loss Prevention, Classification and Discovery and Destruction and Masking.

• Review DLP incident and escalate potential policy violation according to the incident management process.
• Develop, measure and report on Data Protection metrics
• Identify opportunities to expand Data Protection capabilities and put plans in place to achieve objectives
• Work with the project managers to create, update and maintain all project related artifacts.
• Update actions and issue log; coordinate and support meetings, meeting minutes, action items, issues and follow ups.
• Identify, mediate, or resolve project related execution issues. Escalate where necessary.
• Policy documentation analysis and updates
• Support DLP Analysts team in reviewing DLP related incidents
• Translate business requests into IT requirements and support the creation, testing and implementation of DLP policies.
• Review policies and regulatory mandates to ensure all necessary DLP controls are being evaluated and kept current
• Assist in DLP policy prioritization activities by analyzing and documenting risk drivers and current state to support recommendations to senior business and systems leaders
• Support business and privacy officer to comply with regulatory security standards and local laws.
• Interview SMEs within business and systems groups to maintain an accurate current state analysis of the data loss risk environment across all enterprise information assets
• Test Data masking – Analysis of the in scope applications and business requirements and determining the best-case masking solutions
• Work with technical SME’s and the business to implement masking solutions in test regions
• Project artifacts and execution tracking
• Provides overviews, coaching and training to more junior Systems Business Analyst where needed

Qualifications:

• BA/BS degree and/or related work experience.
• Must of excellent communication skills
• Must have Business Analyst experience around application development or infrastructure implementation
• Experience as Security Analyst, IT Consultant, or IT Supporter Experience with managing Microsoft Desktop configuration
• Experience with Data Loss Prevention controls
• Experience with understanding the configuration, testing, and implementing DLP rules
• Experience with reviewing DLP incidents and tuning DLP rules
• Experience and basic understanding of DBMS configurations and terms. (Schemas, DB’s, Tables, Columns, data types)
• Experience or knowledge of Data Masking processes and techniques (using Informatica or other known solutions)
• Experience or working knowledge of Regulations such as GDPR, NYDFS Cyber Security, Cayman Data Protection, etc.
• Experience with Microsoft SharePoint
• Able to handle and keep organized multiple projects simultaneously.
• Ability to analyze current workflows and identify opportunities for improvement.
• Knowledge of all phases of the Systems Development Life Cycle
• Knowledge of project management methodologies and techniques including task and resource planning
• Knowledge of Microsoft Windows desktop configuration and management
• Knowledge of Microsoft Active Directory and Azure Active Directory
• Familiarity with basic systems infrastructure and terms
• Ability to create presentations using software such as Microsoft PowerPoint.
• Ability to use standard desktop tools and software effectively (Microsoft Office, Word, Excel, Outlook).
• Ability to analyze current workflows and identify opportunities for improvement.
• Excellent Written and oral communications skills
• Experience with Symantec DLP
• Experience with Azure Information Protection