Senior Digital Data Loss Investigator

Senior Digital Data Loss Investigator

Location: Macclesfield, UK

Competitive Salary and Benefits

Closing Date: 22nd September 2024

Hybrid role: 3 days in office and 2 days working from home

About the role

Cybersecurity Defence Operations (CSDO), which sits within ETS, is fundamental to enterprise information security and responsible for detecting, analysing, and responding to real or potential security incidents. The Data Loss Prevention (DLP) Analyst specializes in the collection, analysis, and investigation of potential data loss incidents to respond both proactively and appropriately. The DLP function is an end-to-end process that allows AstraZeneca to respond more effectively to data loss incidents and implement measures to mitigate or close gaps in defence, thereby reducing the risk of data breaches occurring.

What you’ll do

• Utilize the SIEM solution to analyse data loss incidents from diverse sources, generating actionable insights including rapid alerts, dashboards, and reports.
• Monitor, respond to and investigate alerts generated by DLP systems determining the root cause, severity of potential data breaches and identifying improvements through lessons learned.
• Monitor user activities and data transfer patterns to detect any behaviour that may indicate insider threat activities.
• Collaborate with relevant support teams and stakeholder to gather data to support investigations into potential Data Loss incidents, other security incidents, insider threats, and legal discovery requests.
• Generate reports and metrics on DLP incidents, trends, and effectiveness of controls for management and stakeholders, and provide commentary as required.
• Work as a liaison with Data Governance to mature the Insider Threat & Data Loss Prevention Capability

Essential for the role

• At least 3 years’ experience in Data Loss Prevention, Digital Forensics, or Insider Threat Investigations.
• Familiarity with Security Technologies (Endpoint Detection, SIEM, Office 365 product etc.).
• Familiarity with Data Loss Preventions tools such as ZScaler, Microsoft Purview, Amazon Macie etc.
• Adaptability and a willingness to learn new technologies and methodologies to stay ahead of evolving data loss threats and prevention strategies.
• Integrity and professionalism in handling sensitive information and maintaining confidentiality throughout data loss investigations and incident response activities.
• A natural curiosity towards investigative analysis, with a proactive approach to uncovering potential data loss incidents and proclivity to ask why and delve deeper into the root causes of data security incidents, enabling comprehensive understanding and effective resolution.
• Excellent communication and interpersonal skills to collaborate effectively with cross-functional teams and communicate technical concepts to non-technical stakeholders.
• Excellent written and verbal communication skills in English.
• A background in either Cybersecurity Operations, eDiscovery, or Access Management.
• Experience with Data Loss Protection controls and collaboration with stakeholders to develop and implement DLP policies and procedures tailored to organizational requirements.
• Experience with capability building.

Desirable for the role

• Degree in Information Security, Cyber Security, or similar.

At AstraZeneca, we are leading a transformation by fusing our digital and data capabilities with backing from the business. We are applying our skills for good, positively impacting patients across the world. We are accelerating the business forward by leveraging our leading technologies and exploring data to make improved decisions. We are a diverse team of technical experts who never stand still. We challenge, innovate and break away from the norm to find bold new ways of approaching the every day!

Ready to make a difference? Join us at AstraZeneca and be part of a team that has the backing to innovate, disrupt an industry and change lives!

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

AstraZeneca embraces diversity and equality of opportunity. We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills. We believe that the more inclusive we are, the better our work will be. We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics. We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorisation and employment eligibility verification requirements.