Job DescriptionThe Impact you will have in this role:Being a member of IT Cybersecurity Engineering and Operations at DTCC, the Data Protection Senior Asscociate supports first-line operational execution of DTCC's Data Protection Program, with a primary focus on DLP operations and AI-related data loss prevention (AI DLP).
This role is responsible for monitoring, triaging, and responding to DLP and AI proxy alerts, validating potential data loss events, and driving remediation or escalation in accordance with established procedures. The Analyst works closely with Content Engineering and AI Data Security Engineering teams to feedback signal quality issues and help improve AI protection outcomes over time.
This is an operational role, not a policy or platform engineering role, but it requires a strong understanding of how AI and DLP controls work in practice to make sound triage and risk decisions.
Your Primary Responsibilities:DLP & AI DLP Alert Monitoring and Triage- Monitor and triage alerts across data protection enforcement points, including:
- Enterprise DLP (email, endpoint, web, SaaS)
- AI-related channels (e.g., AI proxy-mediated GenAI interactions, Copilot and AI tool usage where alerts are raised)
- Assess alerts for validity, severity, and potential data exposure, distinguishing true risk from false positives.
- Prioritize and process events in line with defined SLAs and escalation thresholds.
AI Data Loss Investigation & Response- Review AI-related DLP events such as:
- Sensitive data detected in prompts submitted to AI tools
- Sensitive content detected in AI responses
- Policy violations involving AI agents or copilots
- Perform first-level investigation to determine:
- Data type and sensitivity
- Source system and user context
- Likely intent vs. accidental exposure
- Execute defined response actions (user outreach, enforcement confirmation, escalation) and document outcomes.
Case Management, Escalation & Remediation- Maintain accurate case records for DLP and AI DLP incidents, including investigation notes, actions taken, and resolution status.
- Escalate complex or high-risk events to Tier 2 (engineering, insider threat, incident response) as required.
- Partner with IAM, Cloud Operations, and Insider Threat teams to support remediation activities.
Signal Quality Feedback & Continuous Improvements- Identify recurring false positives, detection gaps, and operational friction within AI and non-AI DLP alerts.
- Provide actionable feedback to Content Engineering and AI Data Security Engineers to support rule tuning and control improvements
- Contribute to improvements in alert routing, triage workflows, and runbooks.
Metrics, Reporting & Evidence- Support production of operational metrics related to:
- Alert volumes and trends
- SLA performance
- AI DLP incident types and outcomes
- Ensure operational evidence (case records, alert artifacts) is complete and audit-ready.
- Assist with internal reviews or regulatory evidence requests as needed (first-line support role).
Stakeholder Interaction & User Support- Conduct professional, risk-appropriate interactions with employees when investigating DLP or AI DLP events.
- Educate users on acceptable use and safe handling of data in AI tools when appropriate, in line with defined scripts and guidance.
- Support consistent and measured user experience to avoid unnecessary friction that drives control bypass.
NOTE: The Primary Responsibilities of this role are not limited to the details above.*Qualifications:- Min 6 years of relevant experience
- Bachelor's Degree and/or equivalent experience
Talents Needed for Success:- 5-8+ years (Senior Analyst) in security operations, DLP operations, SOC, or data protection roles.
- Experience triaging security or DLP alerts in a production environment.
- Working understanding of:
- Data Loss Prevention (DLP) concepts
- Data classification and sensitivity handling
- AI-related data risk patterns (e.g., sensitive data submission to AI tools)
- Strong investigative, documentation, and judgment skills.
- Exposure to AI proxy or AI usage monitoring from an operational perspective.
- Experience with Microsoft Purview, Zscaler, or similar DLP platforms.
- Familiarity with tiered security operations and escalation models.
- Strong Excel and ticketing / case management skills
The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.
Learn more about Clearance and Settlement by clicking here.
