What are the responsibilities and job description for the Data Loss Prevention Analyst position at Mercantile Bank?
Join Mercantile Bank as a Full-Time Data Loss Prevention Analyst and immerse yourself in a vibrant, collaborative environment where your expertise will play a crucial role in enhancing security processes. This is an exciting opportunity to directly impact our organization while working onsite in beautiful Wyoming, MI. You'll be at the forefront of innovative security strategies, contributing to a culture that values problem-solving and customer-centricity. By joining our high-performance team, you can engage in forward-thinking projects that challenge the status quo and foster collaboration among dedicated professionals. Your contributions will help safeguard our clients' information and reinforce our commitment to excellence and integrity.
Core Responsibilities:
- Take the lead role in developing and enhancing the bank's DLP program.
- Use your experience in investigations to uncover potential misuse of data, intellectual property and compliance policy violations.
- Partner with a variety of business units to create secure data protection policies.
Why Mercantile Bank?
Mercantile Bank was founded by entrepreneurs who believed building strong relationships and communities is accomplished through collaboration and innovation. It's more than being a financial institution, it's being a trusted ally and community partner. As Michigan's largest community bank, our roots are deeply embedded in the diverse communities we serve. Our commitment to our customers and community is at the core of all we do.
As an employee of Mercantile Bank, you will receive competitive compensation, bonus opportunities, and best-in-class benefit options. With a minimum of 3 weeks' vacation, sick time, 11 paid holidays, generous 401k match of 5%, company paid life insurance, tuition reimbursement, IVF and adoption assistance, zero-interest loans for fitness equipment and business attire, discounted bank services, employee stock purchase plan, 529 savings plans, health savings accounts, flexible spending accounts, legal protection, exceptional training and development opportunities, and encouragement to connect with community through volunteer opportunities.
A Look into Your Day
As a Data Loss Prevention Analyst at Mercantile Bank, you will play a critical role in safeguarding our most sensitive data assets by operating and maturing our Data Loss Prevention (DLP) program. In this position, you'll lead complex security investigations into data misuse, intellectual property theft, and compliance policy violations. The ideal candidate will demonstrate expert-level proficiency in security tooling and conduct detailed forensic analyses while maintaining professional collaboration with legal counsel and executive leadership, including the CISO. Key responsibilities include implementing data tagging strategies, monitoring and triaging security alerts, and serving as the subject matter expert for the enterprise DLP platform. You will collaborate with various business units to define and enforce robust data protection policies, evaluate new technologies, and conduct technical investigations into security events.
Your ability to analyze user behavior and present complex issues in an understandable manner will be instrumental in enhancing our overall data security posture.
What We're Looking For
To excel as a Data Loss Prevention Analyst at Mercantile Bank, candidates would ideally have experience in data loss prevention, insider threats, or data protection technologies. A solid understanding of IT security fundamentals, risk assessments, and compliance processes is essential.
Requirements:
- Bachelor's degree or equivalent industry-recognized certifications
- 3-5 years' experience
- Good understanding of functional IS processes
- Good understanding of system vulnerabilities and exploitation and vulnerability mitigation
- Understanding ITIL change management processes and procedures
Preferred Qualifications:
- 2 years' experience focused on data loss prevention (DLP), insider threat or data protection technologies
- Hands-on experience with DLP tools, particularly Microsoft Purview or other enterprise solutions, showcasing proven skills in policy configuration, detection tuning, and incident management
- Proven DLP administration skills: configuring policies, tuning detection rules, managing agents, generating reports, and performing incident investigations
- Strong understanding of data classification methodologies, sensitive data types (PII, PHI, PCI, IP, credentials), and regex/pattern matching for content inspection
- Experience with incident response processes, forensic investigation techniques, and security event escalation workflows
- Knowledge of compliance frameworks and regulations: GDPR, HIPAA, PCI-DSS, SOX, GLBA and their data protection requirements