Information Security Data Protection Analyst (Contract)

Information Security Data Protection Analyst (Contract) Corporate Services - Information Technology - Experienced Professional At AlixPartners, we solve the most complex and critical challenges by moving quickly from analysis to action when it really matters; creating value that has a lasting impact on companies, their people, and the communities they serve. By understanding, respecting, and honoring the needs of our employees, clients, and communities, AlixPartners actively promotes an inclusive environment. We strongly believe in the value that diversity brings to our experiences and are committed to the perpetual enhancements of initiatives, policies, and practices. We hold ourselves accountable by providing the space for authenticity, growth, and equity for everyone. AlixPartners has embraced a hybrid work model to provide flexibility and support our employees’ work-life integration. Our hybrid model combines a mix of in-person at an AlixPartners office on Tuesday, Wednesday, and Thursday, with remote working options for Monday and Friday. Location: Southfield, MI; assignment is expected to run through 2025 What you’ll do As a member of the Information Security (IS) team, the IS Data Protection Analyst will be responsible for ensuring the confidentiality, integrity, and availability of information assets within the enterprise. The IS Data Protection Analyst will protect and defend against the loss of critical data and the misuse or abuse of corporate systems and information by identifying situations when information is disclosed to unwanted parties; may also create and maintain security systems. This position aligns with the Cyber Defense Analyst work role within the NICE Cybersecurity Workforce Framework. Data Security Triage alerts related to protection of intellectual property and other sensitive data; review and respond to potential data protection incidents identified by various data management (storage/transmission/access) and user behavior monitoring systems, such as Data Security Posture Management (DSPM), Data Loss Prevention (DLP), Digital Rights Management (DRM), Insider Risk Management (IRM), and Cloud Access Security Broker (CASB). Escalate alerts to Senior Analyst, Lead, or Team Lead as appropriate. Leverage eDiscovery and other capabilities to perform or support investigations of potential insider activities. Track and escalate data protection attestation activities throughout the organization. Participate in remediation efforts when data is compromised. Recommend controls to mitigate security vulnerabilities. Assist the team in testing and evaluating new processes designed to improve visibility of potential gaps in the environment. Keep current on information security trends, new threats and attack techniques, and emerging security technologies. Data Protection Work closely with management, leads, peers, development teams, business functions, and end users to ensure adequate data protection throughout the organization. Create data protection reports and metrics that can be used to identify enhancements and additional controls based on business security models. Analyze trends to identify gaps and weaknesses on current alerting platforms and recommend improvements to ensure evolving capabilities. Support Information Security initiatives, including security enhancements, new security technology evaluation, testing, implementation, and operation, project requirements gathering, internal client communications, data protection inquiries, and documentation. Educate employees on data protection standards and procedures. Additional responsibilities as identified. This description is not designed to encompass a comprehensive listing of required activities, duties, or responsibilities. What you’ll need Bachelor’s degree in Information Security or related field preferred or in progress; work experience and background may be considered in lieu of education. Minimum one (1) year of information security experience preferred. Security fundamentals certification such as GISF, GSEC, Security+, or similar preferred. Demonstrated knowledge of computer networking concepts and protocols, and network security methodologies. Demonstrated knowledge of risk management and vulnerability management processes. Demonstrated knowledge of system, network, and application threats and vulnerabilities. Effective written and verbal communication skills with the ability to present to stakeholders at all levels. Ability to manage and prioritize responsibilities effectively, adapt to changing circumstances to meet strict deadlines under time constraints while taking responsibility for own workload. Collaborative style and client-service mindset with the ability to interact professionally with a diverse group of customers at all levels. Proactive and self-motivated. High attention to detail and accuracy. Excellent problem-solving ability and ability to resolve issues under tight time frames. Excellent written and verbal communication skills in English. Core working hours are generally 8:30 AM – 5:30 PM, Monday - Friday; willingness to work outside of normal U.S. business hours, and as unique projects/needs arise. Ability to work full time in an office and remote environment; physically able to sit/stand at a computer and work in front of a computer screen for significant portions of the workday. Must become familiar with, and promote and abide by, our Core Values as defined by the AlixPartners’ Code of Conduct and foster an inclusive environment with people at all levels of an organization. AlixPartners is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or disability. AlixPartners is a proud Silver award-winning Veteran Friendly Employer. #J-18808-Ljbffr AlixPartners GmbH