- Monitoring & Alert Handling o Monitor data protection dashboards and alert queues for policy violations or anomalous activity.
o Conduct preliminary analysis on triggered alerts and apply standard operating procedures to determine severity.
- Incident Triage & Escalation o Validate alerts, gather relevant logs or evidence, and escalate incidents when necessary.
o Document incident details clearly in ticketing or incident management systems.
- Collaboration & Reporting o Work closely with team members to address inquiries or provide updates on active alerts.
o Generate basic daily and weekly reports on DLP alerts and incidents.
- Policy Awareness o Maintain understanding of basic data protection policies and procedures.
o Provide initial feedback on policy effectiveness based on recurring alerts.
100%
ORGANIZATIONAL RELATIONSHIPS
• Reports to ZICC Data Protection Lead
- Collaborate with peer ZICC Data Protection Analysts
- Data Protection Service Lead (US)
- Sr. Data Protection Analyst team (US)
- Insider Threat Investigations Manager (US)
EDUCATION AND EXPERIENCE
Education
- University Degree in Computer Science or Information Systems is required
- MS or advanced identity courses or other applicable certifications is desirable, including:
o Certified Information Systems Security Qualified (CISSP)
Experience
- A minimum of 4+ years of relevant experience in Information Security focusing preferably working with data loss protection (DLP) technologies or in a SOC environment.
- Expertise in Netskope CASB and Symantec DLP is desirable.
- Experience working with global teams across multiple time zones.
- Demonstrated ability to work within diverse technical teams.
TECHNICAL SKILLS REQUIREMENTS
• Proficiency in data protection tools (e.g., Netskope, Symantec, Microsoft, etc.)
- Solid understanding of Windows, macOS, and/or Linux environments
- Familiarity with SIEM products, ticketing systems, and incident response workflows
- Ability to identify indicators of compromise (IOCs) and malicious behaviors
- Capable of driving root cause analysis and coordinating remediation
- Pharmaceutical or other regulated industry experience is desirable
- Must be fluent in both written and spoken English, with the ability to communicate effectively across technical and non-technical audiences
PHYSICAL POSITION REQUIREMENTS
Availability to work between 1pm IST to 10pm IST hours (minimum 3 hours of daily overlap with US ET Time zone)