Data Loss Prevention AnalystPosted: November 17, 2009
Job Summary:
The Data Loss Prevention (DLP) Analyst is responsible for establishing and maintaining a program of protections including tools, processes, and training/awareness that ensures information cannot be transported or exposed in an unauthorized fashion. This responsibility is also applied internally to the specific controls required by the relevant regulatory bodies regarding protection of customer non public information (NPI). This role requires participating in guiding the strategy development, interfacing with lines of business and other IT teams on information storage and transport issues, creating awareness of strategy, as well as maintenance and daily duties with relevant tools.
Essential Functions:
o Maintain NPI Inventory for entire enterprise
o Integrate NPI Inventory with risk assessment data to provide the NPI Risk Assessment
o Maintain DLP tools and related policies to ensure 100% coverage of assets
o Periodically test and validate DLP controls
o Regularly monitor results of DLP controls
o Provide metrics regarding coverage, events, incidents, and other relevant measures
o Investigate DLP events to identify true incidents and escalate as appropriate
o Coordinate with proper business units and other IT staff to ensure DLP and NPI programs are in compliance with regulatory, tax and operational requirements
o Work with business units on risk control issues that affect GLBA and Records Program
o Develop materials and design delivery programs to educate staff and raise awareness for the programs
o Participating in other IT Security initiatives as needed
Experience & Qualifications:
· 5-7 years information security experience, preferably in a financial institution subject to GLBA regulations
· General understanding of IT systems and software
· In-depth knowledge of Data Loss Prevention (DLP) tools and methods
· Excellent communication skills, both written and verbal
· Ability to be adaptable and flexible while responding to deadlines on assignments and workflow fluctuations
· Ability to work with concepts and work independently
· Excellent problem diagnosis, analytical, and communication skills
· Ability to balance several conflicting demands to achieve optimum services performance with minimum disruption to business operations
· Ability to manage and influence individuals that do not report to them directly
Education and/or Certifications:
· A post secondary education is required, graduate work a plus
· Security specific certifications a plus
Technical skills and abilities:
· Sufficient knowledge of technical issues affecting NPI and data loss to address relevant issues
· Ability to work with DLP technologies
Working Conditions:
· General office work
· 10 % travel
Work Location: Wilmington, DE
Contract Duration: 3 to 5 months with possible extension or conversion.
| Category: | Information Technology |
| | | Location: | Wilmington, DE | | County: | New Castle County | | ZIP Code: | 19801 | | Pay Rate: | Negotiable | | Job Terms: | 4-6 months (contract) | | Company: | PSCI | | Phone: | 1302-334-4107 | | Fax: | email only |
|
