Information Security Data Protection Analyst

Corporate Services - Information Technology - Experienced Professional

At Alix Partners, we solve the most complex and critical challenges by moving quickly from analysis to action when it really matters; creating value that has a lasting impact on companies, their people, and the communities they serve. By understanding, respecting, and honoring the needs of our employees, clients, and communities, Alix Partners actively promotes an inclusive environment. We strongly believe in the value that diversity brings to our experiences and are committed to the perpetual enhancements of initiatives, policies, and practices.

We hold ourselves accountable by providing the space for authenticity, growth, and equity for everyone.

Alix Partners has embraced a hybrid work model to provide flexibility and support our employees’ work-life integration. Our hybrid model combines a mix of in-person at an Alix Partners office on Tuesday, Wednesday, and Thursday, with remote working options for Monday and Friday.

Location: Southfield, MI; assignment is expected to run through 2025

What you’ll do

As a member of the Information Security (IS) team, the IS Data Protection Analyst will be responsible for ensuring the confidentiality, integrity, and availability of information assets within the enterprise. The IS Data Protection Analyst will protect and defend against the loss of critical data and the misuse or abuse of corporate systems and information by identifying situations when information is disclosed to unwanted parties;

may also create and maintain security systems. This position aligns with the Cyber Defense Analyst work role within the NICE Cybersecurity Workforce Framework.

Data Security

• Triage alerts related to protection of intellectual property and other sensitive data; review and respond to potential data protection incidents identified by various data management (storage/transmission/access) and user behavior monitoring systems, such as Data Security Posture Management (DSPM), Data Loss Prevention (DLP), Digital Rights Management (DRM), Insider Risk Management (IRM), and Cloud Access Security Broker (CASB).
• Escalate alerts to Senior Analyst, Lead, or Team Lead as appropriate.
• Leverage eDiscovery and other capabilities to perform or support investigations of potential insider activities.
• Track and escalate data protection attestation activities throughout the organization.
• Participate in remediation efforts when data is compromised.
• Recommend controls to mitigate security vulnerabilities.
• Assist the team in testing and evaluating new processes designed to improve visibility of potential gaps in the environment.
• Keep current on information security trends, new threats and attack techniques, and emerging security technologies.

Data Protection

• Work closely with management, leads, peers, development teams, business functions, and end users to ensure adequate data protection throughout the organization.
• Create data protection reports and metrics that can be used to identify enhancements and additional controls based on business security models.
• Analyze trends to identify gaps and weaknesses on current alerting platforms and recommend improvements to ensure evolving capabilities.
• Support Information Security initiatives, including security enhancements, new security technology evaluation, testing, implementation, and operation, project requirements gathering, internal client communications, data protection inquiries, and documentation.
• Educate employees on data protection standards and procedures.
• Additional responsibilities as identified. This description is not designed to encompass a comprehensive listing of required activities, duties, or responsibilities.

What you’ll need

• Bachelor’s degree in Information Security or related field preferred or in progress; work experience and background may be considered in lieu of education.
• Minimum one (1) year of information security experience preferred.
• Security fundamentals certification such as GISF, GSEC, Security+, or similar preferred.
• Demonstrated knowledge of computer networking concepts and protocols, and network security…