Job DescriptionThe Impact you will have in this role:Being a member of IT Cybersecurity & Platform Engineering team, the Data Protection Operations Assocaite is responsible for the day-to-day operation of DTCC's data protection controls, with primary focus on triaging alerts, investigating data risk signals, managing exceptions and supporting remediation across DTCC's Data Protection technologies including DLP, CASB and DSPM.
This role sits in the first line of defense and serves as a key operational interface between security tooling, business users, and IT partners. The Analyst must combine strong analytical judgment with clear communication skills to assess risk, engage stakeholders, and drive timely resolution of data protection issues, while maintaining a consistent and professional user experience
Your Primary Responsibilities: Alert Triage & Investigation - Monitor, triage, and investigate alerts and findings from:
- DSPM platforms (e.g., sensitive data discovery, exposure findings, excessive access)
- CASB / cloud security tools (unsanctioned SaaS usage, risky data sharing)
- DLP controls (email, endpoint, web, SaaS, and AI-related channels)
- Assess alerts for severity, credibility, and business impact, distinguishing true data risk from false positives.
- Prioritize and process alerts in line with defined SLAs and escalation criteria.
Data Risk Validation & Remediation Support- Analyze DSPM findings, engage data owners, application teams, and IT partners to validate findings, recommend and track remediation actions (access reduction, secure configuration, reclassification)
- Support remediation lifecycle through closure, documenting outcomes and residual risk.
CASB & DLP Operations- Investigate CASB alerts related to Unsanctioned or high-risk SaaS usage, Cloud data sharing patterns that may introduce exposure
- Investigate DLP events
- Execute defined response actions, escalate complex cases to Tier 2 engineering or incident response teams as required.
Stakeholder Communication & Engagement- Serve as a primary operational point of contact for business and IT stakeholders on data protection issues.
- Communicate findings clearly and professionally to non-technical audiences, explaining:
- What was detected
- Why it matters
- What actions are required
- Balance risk reduction with user experience, avoiding unnecessary friction that could drive control bypass.
Continuous Improvement & Feedback Loop- Identify recurring alert patterns, false positives, and operational gaps across DSPM, CASB, and DLP tools.
- Provide structured feedback to Content Engineering and Engineering teams to support rule tuning and control enhancements.
- Contribute to improvements in operational runbooks, workflows, and triage consistency
Documentation, Metrics & Evidence- Maintain accurate, audit-ready case documentation for all investigations and remediation activities.
- Support production of operational metrics
- Assist with internal reviews, audit requests, and regulatory evidence gathering as a first-line owner.
NOTE: The Primary Responsibilities of this role are not limited to the details above.*Qualifications: - Min 3 years of relevant experience
- Bachelor's Degree and/or equivalent experience
Talents Needed for Success: - 3-5+ years in security operations, data protection operations, SOC, or cloud security roles.
- Experience triaging alerts and investigations from security or data protection platforms.
- Working familiarity with technical controls and concepts including:
- Data Loss Prevention
- Cloud and SaaS security
- Data discovery, classification, and exposure risk
- Strong analytical and judgment skills, with the ability to assess data risk in real-world business contexts.
- Excellent written and verbal communication skills.
- Prior experience engaging business users and application teams on security or data risk topics.
- Comfort working in a regulated or highly controlled environment
The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.
