DLP Analyst

Technologies we use

About the project

Your responsibilities

• Monitor DLP events across multiple tools (e.g., Microsoft Purview, Symantec, Zscaler, CASB) and triage alerts against policies
• Follow incident response playbooks, ensuring timely investigation, escalation, and remediation of potential data loss events
• Collaborate with local/regional DLP teams and the Information Protection Response (IPR) team to evaluate risk and determine containment measures
• Support handovers across time zones, ensuring continuity of incident follow-up and accurate record-keeping
• Assist in policy refinement and tuning to reduce false positives and improve control effectiveness
• Coordinate multiple stakeholders during response phases and assist root cause analysis, corrective action, and prevention measures
• Document incidents and updates in line with internal compliance and reporting requirements
• Proactively identify areas for automation and process improvement to enhance operational efficiency
• Promote information protection awareness when engaging with business and IT stakeholders
• Participate in team meetings, knowledge sharing exercises, and improvement initiatives globally

Our requirements

• Hands-on experience with enterprise DLP solutions, such as Microsoft Purview, Symantec DLP, CASB platforms, and Zscaler tools
• Proven ability in monitoring, triage, and policy tuning for DLP controls
• Strong understanding of incident response methodologies and security frameworks
• Familiarity with data lifecycle management and privacy regulations (e.g., GDPR)
• Knowledge of operating systems, common platforms, and financial sector compliance standards
• Excellent stakeholder management skills with strong collaboration in cross-cultural, global environments
• Proficiency in English (spoken and written), with exceptional communication and reporting skills

Optional

• Experience in global information security operations or in a regulated financial services environment
• Knowledge of automation/orchestration solutions to streamline incident handling
• Understanding of threat landscapes, compliance controls, and audit processes

What we offer

• Hybrid work setup – remote days available depending on the client’s arrangements - 6 days a month from the office in Kraków
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

This is how we work on a project

Benefits