Cybersecurity Data Protection Analyst

Location
Columbia, SC.

Experience Level
Mid-Level (3 to 5 or more years of experience)

Role Overview
The Cybersecurity & Data Protection Analyst supports an enterprise state agency's information security and data governance program. This role focuses on safeguarding sensitive information, monitoring insider risk vectors, and securing artificial intelligence implementations (such as Copilot and AI DSPM). Operating within a hybrid framework, the analyst is responsible for monitoring Data Loss Prevention (DLP) alerts, evaluating third-party vendor security postures, performing compliance audits, and investigating unauthorized access or data exposure incidents. This is a 12-month contract opportunity with a possibility of extension, requiring mandatory state-level criminal, credit, and E-Verify background screenings.

Key Responsibilities

Data Protection & Governance

• Monitor and administer Data Loss Prevention (DLP) policies and controls, investigating potential data loss, exposure, and unauthorized access events.
• Support Data Security Posture Management (DSPM) initiatives to secure sensitive data utilized by AI and Copilot systems.
• Track and audit the movement, storage, and sharing of sensitive information, assisting in data classification and handling standards.
• Collaborate with data owners and stewards to support agency-wide data governance and information protection initiatives.

Security Monitoring & Incident Response

• Review, analyze, and triage security alerts generated by DLP platforms, insider risk systems, and data security consoles.
• Investigate suspicious activity involving sensitive information, maintaining detailed records and documentation of all findings.
• Escalate validated security incidents according to established agency incident response procedures, assisting in containment and recovery efforts.

Insider Risk & Vendor Management

• Monitor Insider Risk Management alerts and cases to investigate potential policy violations while maintaining strict confidentiality and proper chains of evidence.
• Recommend corrective actions and risk mitigation strategies to address insider threat vectors.
• Participate in third-party vendor security assessments, reviewing security documentation, audit reports, and questionnaires to identify risks.

Security Auditing, Compliance, & Collaboration

• Support cybersecurity compliance audits and control validation reviews by collecting and analyzing evidence for regulatory requirements.
• Work collaboratively with both technical and non-technical staff to address data security concerns and implement solutions.
• Prepare status reports, security metrics, and presentations regarding risk trends for agency leadership.

Required Qualifications

• 3 to 5 or more years of experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis.
• 3 or more years of hands-on experience working with data protection technologies (such as DLP, insider risk management tools, and data security posture management for AI).
• 3 or more years of experience reviewing and triaging data-related security alerts, analyzing sensitive data movement, and documenting findings.
• 3 or more years of experience collaborating with technical and non-technical teams to resolve security issues and support data security improvements.
• Foundational cybersecurity certification (such as CompTIA Security or GIAC Security Essentials [GSEC]) is required.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field (equivalent professional experience may be considered).
• Ability to successfully pass mandatory state background screenings, including criminal, credit, and E-Verify checks, and sign an agency confidentiality agreement.

Preferred Qualifications

• Experience working with AI-driven security tools (such as Cortex) and DSPM platforms designed to manage sensitive data used by AI systems.
• Practical experience fine-tuning DLP policies, refining insider risk alerts, or supporting enterprise data governance programs.
• Familiarity with Azure cloud security, identity-based access controls, conditional access policies, and security automation or scripting.
• Professional certifications such as Microsoft SC-100, SC-200, CEH, or an Associate-level CISSP.

Core Skills & Attributes

• Strong analytical and problem-solving abilities with a high attention to detail and data accuracy.
• Excellent communication and presentation skills, with the ability to convey complex technical risks to non-technical business partners.
• Strong stakeholder management skills to work effectively across cross-functional teams.
• Ability to work productively and independently in a remote/hybrid environment while maintaining strict confidentiality and proper chain of evidence procedures.