Percent of Time
Monitoring & Alert Handling o Monitor data protection dashboards and alert queues for policy violations or anomalous activity.
o Conduct preliminary analysis on triggered alerts and apply standard operating procedures to determine severity.
Incident Triage & Escalation o Validate alerts, gather relevant logs or evidence, and escalate incidents when necessary.
o Document incident details clearly in ticketing or incident management systems.
Collaboration & Reporting o Work closely with team members to address inquiries or provide updates on active alerts.
o Generate basic daily and weekly reports on DLP alerts and incidents.
Policy Awareness o Maintain understanding of basic data protection policies and procedures.
o Provide initial feedback on policy effectiveness based on recurring alerts.
100%
ORGANIZATIONAL RELATIONSHIPS
• Reports to ZICC Data Protection Lead
Collaborate with peer ZICC Data Protection Analysts
Data Protection Service Lead (US)
Sr. Data Protection Analyst team (US)
Insider Threat Investigations Manager (US)
EDUCATION AND EXPERIENCE
Education
University Degree in Computer Science or Information Systems is required
MS or advanced identity courses or other applicable certifications is desirable, including:
o Certified Information Systems Security Qualified (CISSP)
Experience
A minimum of 4+ years of relevant experience in Information Security focusing preferably working with data loss protection (DLP) technologies or in a SOC setting.
Expertise in Netskope CASB and Symantec DLP is desirable.
Experience working with global teams across multiple time zones.
Demonstrated ability to work within diverse technical teams.
TECHNICAL SKILLS REQUIREMENTS
• Proficiency in data protection tools (e.g., Netskope, Symantec, Microsoft, etc.)
Solid understanding of Windows, macOS, and/or Linux environments
Familiarity with SIEM products, ticketing systems, and incident response workflows
Ability to identify indicators of compromise (IOCs) and malicious behaviors
Capable of driving root cause analysis and coordinating remediation
Pharmaceutical or other regulated industry experience is desirable
Must be fluent in both written and spoken English, with the ability to communicate effectively across technical and non-technical audiences
PHYSICAL POSITION REQUIREMENTS
Availability to work between 1pm IST to 10pm IST hours (minimum 3 hours of daily overlap with US ET Time zone)