Information Protection Analyst

Role purpose: Protect sensitive information by implementing, monitoring, and improving information protection controls, ensuring data confidentiality, integrity, and regulatory compliance across systems and users., * Design, configure, and maintain data protection solutions such as data loss prevention (DLP), information classification, encryption, and rights management.

• Monitor alerts and telemetry to detect, investigate, and respond to data exposure risks and policy violations.
• Develop and enforce information protection policies, standards, and procedures aligned with business and compliance requirements.
• Conduct risk assessments, control testing, and audits; document findings and drive remediation plans.
• Partner with IT, Security Operations, Legal, and business teams to embed protection controls into workflows and applications.
• Create user guidance and awareness materials to improve secure data handling and reduce accidental leakage., As a financial institution we need to be in control of our data, especially sensitive data. As a Information Protection Analyst you will be responsible to protect this data against loss and misuse. This role is a revamped version of DLP analyst that broadens the scope to Information Protection. Using different Purview modules you analyse and respond to data protection alerts. Your insights in data protection will be a valuable feedback loop to the business to better secure our data. Interested? Please read further!

Your job

You will be an Information Protection Analyst in the Information Protection team that is part of the CISO (Corporate Information Security Office) Cyber Defence department.

This role requires extensive knowledge of data within a Microsoft environment and what it takes to be in control of this data. Using Microsoft Purview (Information Protection, DLP, IRM etc.) you analyse alerts and respond to incidents. You also provide valuable feedback on the policies in place.

You are up to speed on laws and regulations (GDPR, DORA, Internal policies etc) and know how these affect the day-to-day operations., You will work for the Cyber Defence department within CISO (Corporate Information Security Office), next to another approximately 150 colleagues. Within Cyber Defense there are several teams with specific security knowledge and goals that you will work closely with. We are adapted with hybrid way of working so you are expected once to twice in office a week.

• Experience with information protection technologies (e.g., DLP, email/web controls, endpoint protection, encryption, key management).
• Knowledge of data classification, retention, access control models, and secure collaboration practices.
• Familiarity with security frameworks and compliance concepts (e.g., ISO 27001, NIST, GDPR, HIPAA, PCI DSS).
• Ability to analyze logs, alerts, and incidents; strong documentation and stakeholder communication skills.
• Understanding of cloud and enterprise environments (e.g., Microsoft 365, Azure, AWS, GCP) and identity platforms., * Good understanding of incident handling and risk management processes
• Good understanding of data security principles
• Understanding and experience working with the Azure Cloud.
• Good communications skills, you will have to communicate to all layers in the business.

Nice to have:

• Knowledge of Privacy regulations, laws and policies.
• Knowledge and experience with Microsoft Purview DLP and Insider Risk Monitoring (IRM)
• Background in Cyber Security Incident Management.
• Experience working in a DevOps/Scrum teams

• A competitive salary in Hay scale 8 or 9, depending on your knowledge and experience
• The freedom to optimize your performance in a flexible working environment
• Tools to stay fit and update your knowledge, with space provided for you to practice and grow your skills.
• An additional benefit budget of 11%, with which you can buy flexible terms of employment.
• A personal development budget.
• A public transportation subscription budget.
• A good pension scheme.