Data Protection Systems Analyst

Job Overview

Under the direction of the Assistant Manager, Records & Information, the Data Protection Systems Analyst matures the organization’s data security posture management (DSPM) and data loss protection (DLP) capabilities across cloud and on-premises environments.  This role leads the daily administration, configuration, monitoring, and continuous improvement of the organization’s DSPM and DLP platforms to protect sensitive data, ensure compliance, and reduce risk by discovering, classifying, and monitoring sensitive data across cloud, endpoint, application, and repository environments.  This role also supports electronic records management, workflow, forms, metadata, retention, permissions, and repository administration.  The position promotes secure, compliant, and efficient information handling practices across the organization.

What you will be doing:

• Work within current data security posture management and data loss prevention applications to discover, classify, and continuously monitor data across SaaS, Azure, application environments, endpoints, and repositories.
• Maintain dashboards, metrics, and reporting for security posture, trends, and SLAs.  Provide guidance on least-privilege access and secure data lifecycle practices.
• Orchestrate posture review and risk assessments; document finding and track closure. Work directly with the Assistant Manager, Records & Information to develop corrective action plans.
• Administer and optimize the organization’s data loss prevention solutions. (e.g. Symmetry DataGuard, Microsoft Purview, etc).
• Create, test, and refine DLP classifiers, rules, labels, alerting, and groups for email, endpoints, cloud applications, web, and network channels; minimize false positives while improving coverage.
• Establish incident response workflows for DLP events; triage alerts, investigate user activity, and coordinate response with the Assistant Manager, Records & Information.
• Conduct user awareness training, job aides, and enablement for responsible data handling.
• Design, build, and maintain workflows, business processes, forms, automated document routing and processes, retention actions, metadata capture, application integrations, etc.
• Align ERM configurations with classification schemes, retention schedules, legal holds, and privacy requirements.
• Monitor repository health, permissions, metadata, and performance; assist with upgrades, patches, and environment changes.
• Performs other related duties as assigned.

What you need:

• Bachelor’s degree in information security, information systems, or equivalent experience.
• Three (3) years in information security including some direct experience in data loss prevention and data security posture management administration and design.
• Experience in the public sector or regulated industries; familiarity with retention schedules and legal data/information/record requirements.
• Familiarity with data security posture management capabilities, data discovery, classification, lineage, access analysis, misconfiguration detection, and remediation workflows.
• Any equivalent combination of education and/or experience may be substituted for the above.

Required Knowledge, Skills and Abilities:

• Knowledge of Microsoft 365 security stack (e.g. Purview, Sensitivity labels, eDiscover, Insider Risk, Defender Suites, Symmetry DataGuard).
• Knowledge of cloud security Azure/AWS, identity Azure AD/Entra, and zero trust principles.
• Knowledge of scripting and automation for policy deployment, integrations, and reporting.
• Knowledge of access control, encryption, data lifecycle, privacy, and records management concepts.
• Skill in analytics, documentation, communication, and problem-solving.
• Ability to collaborate across departments and organizational levels including technical teams, business units, records management, legal, audit, and cybersecurity stakeholders.

Special Requirements:

• Must obtain a Security Identification Display Area (SIDA) Airport Identification/Access Badge (badge) in accordance with Department of Homeland Security Transportation Security Administration (TSA) requirements in Chapter 49 of the Code of Federal Regulations Part 1500 et al., and DFW Airport’s Airport Security Program within thirty (30) days from date of employment and maintain qualification for a SIDA badge upon each badge renewal.
• Ability to obtain and maintain an FBI Criminal Justice Information System (CJIS) clearance.

Desirable:

• Practical experience with electronic content management system (ECM) workflow design, forms, repository administration, security/permissions, and integrations.
• Security certification: CCSK/CCSP, Security+, or data/privacy credential CDPSE, CIPM, CIPP.
• Laserfiche certification (e.g. Laserfiche Certified Professional or equivalent vendor training).

About Us

We are Dallas Fort Worth International (DFW) Airport-one of the most successful airports in the world by any definition. We are recognized for our innovation, leadership, drive for excellence and talented employees.

Our success is made possible because of the diverse talents of over 2,100 employees who champion our mission of providing an exceptional airport experience to our customers and connect our community to the world. We are looking for the best talent to join us and help reimagine what an airport can be.

Bring your talents to DFW. Live and work with purpose.