> Markdown version of [/jobs/ext/2105911-data-protection-analyst](https://www.wearedevelopers.com/jobs/ext/2105911-data-protection-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Data Protection Analyst - **Company:** Acrisure LLC - **Location:** Valhalla, NY, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, CompTIA Security+, Cyber Security, Extract Transform Load (ETL), Data Security, Digital Forensics, Intrusion Detection and Prevention, Microsoft SharePoint, Cloud Collaboration, Data Processing, Microsoft Fabric, Information Technology, Servicenow - **Published:** August 18, 2026 - **Apply:** https://www.dice.com/job-detail/5bf611c0-bb40-4271-86cb-e99519883f44 ## About the Role * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Criminal Justice, or a related field, or equivalent practical experience. * 2+ years of experience in Security Operations, Cybersecurity, Insider Risk, Digital Forensics, eDiscovery, Compliance, Privacy, or Incident Response. * Experience investigating security events and user activity involving sensitive information. * Working knowledge of Microsoft 365 security, collaboration, and data protection capabilities. * Experience using case management platforms such as ServiceNow or similar systems. * Strong analytical, investigative, documentation, and communication skills. * Ability to work with sensitive matters and partner appropriately with Legal, HR, Privacy, Compliance, IT, and business stakeholders. Preferred Qualifications * Experience with Microsoft Purview Insider Risk Management. * Experience with Microsoft Purview DLP, eDiscovery, and Information Protection. * Experience supporting HR, Legal, Privacy, Compliance, or regulatory investigations. * Knowledge of data protection, privacy, employee monitoring, and regulated data handling concepts. * Security certifications such as SC-200, SC-400, GCFA, GCFE, GCIH, Security+, CySA+, or similar. #LI-CH1 Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership. ## Description The Data Protection Analyst is responsible for monitoring, investigating, and responding to data protection, insider risk, and data exfiltration events across the organization. This role serves as a key member of the Cybersecurity team, leveraging Microsoft Purview, ServiceNow, Microsoft 365, and other security technologies to identify, investigate, and mitigate threats involving sensitive company, client, financial, and regulated data. The Analyst partners closely with Security Operations, Legal, Human Resources, Privacy, and IT teams to support insider risk investigations, eDiscovery requests, data subject access requests (DSARs), and data protection initiatives. This position plays a critical role in protecting Acrisure information assets while ensuring investigations are conducted in accordance with legal, regulatory, and privacy requirements. Success in this role means protecting Acrisure's sensitive data by quickly identifying, investigating, and mitigating insider risk and data protection incidents before they become business, legal, regulatory, or reputational events. You will deliver high-quality investigations, improve detection fidelity, and provide actionable insights that strengthen data protection controls, reduce risk, and support informed decisions across Security, Legal, HR, Privacy, and business leadership. Responsibilities: Insider Risk Operations * Monitor and investigate insider risk alerts, suspicious user activity, data exfiltration attempts, and DLP incidents. * Conduct investigations related to mass downloads, large-scale sharing, data staging, privileged account misuse, and potential account compromise. * Triage and document insider risk cases using the enterprise case management process. * Collect, preserve, and analyze evidentiary data in support of investigations. * Coordinate with Legal, Human Resources, Privacy, Compliance, and management teams during investigations. Data Protection and DLP Monitoring * Monitor DLP alerts across Microsoft 365, endpoints, email, SharePoint, OneDrive, Teams, and cloud collaboration platforms. * Review policy violations and user justifications to identify repeat patterns, emerging risk, and areas requiring policy tuning. * Assist with tuning detection use cases to improve signal quality and reduce false positives. * Track and report key metrics including alert volume, true positive rate, time to triage, time to case closure, aged cases, and repeat patterns. Investigations and Case Management * Support eDiscovery, litigation hold, DSAR, regulatory inquiry, departing employee review, HR investigation, and security investigation activities. * Use ServiceNow and Microsoft Purview capabilities to manage investigation workflows and evidence collection. * Maintain accurate case notes, evidence records, timelines, and reporting artifacts. * Escalate high-risk cases and policy exceptions to the appropriate Cybersecurity, Legal, HR, Privacy, or business stakeholders. Threat Detection and Continuous Improvement * Identify insider risk trends and recommend improvements to detection, response, and escalation processes. * Participate in proactive threat hunting involving sensitive data movement and user behavior. * Contribute to insider risk playbooks, response procedures, dashboards, and operational standards. * Support data protection awareness efforts by identifying common user behaviors and recurring policy friction points. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)