Data Protection Associate

Are you ready to make an impact at DTCC?
Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.
 

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact you will have in this role:

Being a member of IT Cybersecurity & Platform Engineering team, the Data Protection Operations Assocaite is responsible for the day‑to‑day operation of DTCC’s data protection controls, with primary focus on triaging alerts, investigating data risk signals, managing exceptions and supporting remediation across DTCC's Data Protection technologies including DLP, CASB and DSPM. 

This role sits in the first line of defense and serves as a key operational interface between security tooling, business users, and IT partners. The Analyst must combine strong analytical judgment with clear communication skills to assess risk, engage stakeholders, and drive timely resolution of data protection issues, while maintaining a consistent and professional user experience
 

Your Primary Responsibilities:
 Alert Triage & Investigation 

• Monitor, triage, and investigate alerts and findings from: 
  • DSPM platforms (e.g., sensitive data discovery, exposure findings, excessive access)
  • CASB / cloud security tools (unsanctioned SaaS usage, risky data sharing)
  • DLP controls (email, endpoint, web, SaaS, and AI‑related channels) 
• Assess alerts for severity, credibility, and business impact, distinguishing true data risk from false positives.
• Prioritize and process alerts in line with defined SLAs and escalation criteria.

Data Risk Validation & Remediation Support

• Analyze DSPM findings, engage data owners, application teams, and IT partners to validate findings, recommend and track remediation actions (access reduction, secure configuration, reclassification)
• Support remediation lifecycle through closure, documenting outcomes and residual risk.

CASB & DLP Operations

• Investigate CASB alerts related to Unsanctioned or high‑risk SaaS usage, Cloud data sharing patterns that may introduce exposure
• Investigate DLP events 
• Execute defined response actions, escalate complex cases to Tier 2 engineering or incident response teams as required.

Stakeholder Communication & Engagement

• Serve as a primary operational point of contact for business and IT stakeholders on data protection issues.
• Communicate findings clearly and professionally to non‑technical audiences, explaining: 
  • What was detected
  • Why it matters
  • What actions are required
• Balance risk reduction with user experience, avoiding unnecessary friction that could drive control bypass.

Continuous Improvement & Feedback Loop

• Identify recurring alert patterns, false positives, and operational gaps across DSPM, CASB, and DLP tools.
• Provide structured feedback to Content Engineering and Engineering teams to support rule tuning and control enhancements.
• Contribute to improvements in operational runbooks, workflows, and triage consistency

Documentation, Metrics & Evidence

• Maintain accurate, audit‑ready case documentation for all investigations and remediation activities.
• Support production of operational metrics 
• Assist with internal reviews, audit requests, and regulatory evidence gathering as a first‑line owner.

 NOTE: The Primary Responsibilities of this role are not limited to the details above.*

Qualifications:

• Min 3 years of relevant experience
• Bachelor’s Degree and/or equivalent experience

Talents Needed for Success:

• 3–5+ years in security operations, data protection operations, SOC, or cloud security roles.
• Experience triaging alerts and investigations from security or data protection platforms.
• Working familiarity with technical controls and concepts including: 
  • Data Loss Prevention 
  • Cloud and SaaS security 
  • Data discovery, classification, and exposure risk
• Strong analytical and judgment skills, with the ability to assess data risk in real‑world business contexts.
• Excellent written and verbal communication skills.
• Prior experience engaging business users and application teams on security or data risk topics.
• Comfort working in a regulated or highly controlled environment

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.