Cybersecurity Analyst - Data Protection, Privacy & Risk

Monitor and investigate alerts from data protection and security tools, including DLP, endpoint, and SaaS platforms. Analyze user and data activity to identify unusual behavior, potential policy violations, and elevated risk scenarios. Support internal reviews and investigations by gathering logs, evidence, and relevant contextual information. Drive continuous improvement of DLP policies and detection rules by identifying trends, reducing false positives, and enhancing monitoring effectiveness. Partner with Legal, HR, and other stakeholders on sensitive data protection matters while maintaining confidentiality and professionalism. Support Data Subject Access Requests (DSARs), including intake, tracking, documentation, and fulfillment activities. Maintain data inventories, data flow maps, and records of processing activities (RoPAs). Assist with privacy notices, consent management, and regulatory compliance activities. Support privacy reviews of vendor and third-party agreements to ensure appropriate data protection controls are in place. Support internal control assessments, audits, and remediation tracking activities. Help maintain security policies, standards, and procedures aligned with industry frameworks such as NIST CSF, ISO 27001, and SOC 2. Assist with third-party risk assessments, vendor reviews, and risk scoring activities. Participate in control testing and audit preparation efforts.