Data Security Analyst

Role Purpose

The Data Security Analyst (AVP) sit within the Information Security function and is responsible for safeguarding bank's data, ensuring it is securely handled, stored and shared. The role focuses on operation monitoring, detection, and investigation of data related security risks, including data loss, unauthorised access, and misuse across enterprise environments. The analyst plays a key role in implementing and managing data security controls, including Data Loss Prevention (DLP), data classification, and monitoring capabilities to safeguard critical information.

Key responsibilities

• Conduct day-to-day security monitoring and BAU activities with a primary focus on data security controls, including DLP, data access, and data handling across enterprise environments, cloud platforms and AI tools
• Investigate and respond to data security incidents, alerts and policy breaches, including data leakage, unauthorised access to data, and misuse of sensitive information
• Operate and enhance data protection capabilities such as data classification and monitoring solutions to identify and mitigate data risk across endpoints, networks, and cloud environments
• Assess and oversee the secure use of data within AI tools and platforms, ensuring appropriate safeguards are in place to prevent unintended data exposure or misuse
• Support governance, risk, and compliance activities related to data security, ensuring adherence to internal policies and regulatory requirements
• Collaborate with security engineering and architecture teams by providing operational insights on data security risks and control effectiveness, supporting secure implementation of solutions
• Contribute to continuous improvement of data security controls, detection rules, and operational processes to enhance visibility and reduce risk

Essential

• 5+ years of experience working within a cybersecurity function, specialising in data security, DLP, or insider threat detection
• Strong hands-on experience in data security disciplines, including DLP, data classification, and/or insider threat monitoring and investigations
• Proven ability to triage, investigate, and respond to data security alerts, including potential data leakage, unauthorised data access, and policy violations
• Experience operating and tuning DLP and data classification tool, with a solid understanding of data handling risks across endpoints, networks, and collaboration platforms
• Proven experience operating in complex environments managing multiple priorities with ambiguity and high levels of responsibility
• Exposure to cloud security concept and CSPM tools and awareness to AI related data security risk is desirable
• Bachelor’s degree in Cybersecurity, Information Security, Risk Management, Computer Science, or a related field