DLP Analyst
The Data Loss Prevention (DLP) Analyst is responsible for providing monitoring, triage, and investigation capabilities for DLP/Insider Threat events. The DLP Analyst will also be responsible to mitigate impacts of DLP events, utilizing defined processes and playbooks, and escalate them as required to the appropriate team or leadership if necessary. Position Responsibilities DLP Analysis
- Monitor DLP alerts generated through the ticketing system and DLP technologies to triage, investigate, document, and resolve DLP events, utilizing pre-defined processes and procedures to do so while adhering to Service Level Agreements/Expectations/Objectives.
- Performs monitoring and initial triage of insider threats, documenting analysis results and decisions that are made.
- Collaborates with corporate fraud and cyber fraud teams on investigations.
- Accurately identifies and classifies the DLP events according to criticality.
- Provides support for investigations of incidents involving the theft/exfiltration of sensitive data.
- Performs processing of DLP exception requests using defined processes.
Communication and Administration
- Supports the development and testing of new DLP policies and rule sets by providing continuous feedback to the DLP Engineering team.
- Supports the development and maintenance of documentation related to DLP incidents and exceptions by providing feedback and user input.
- Performs data collection in support of trend analysis and metrics (KPI/KRI).
- Assists in DLP controls testing, audit, and other ad hoc requests as required, with guidance from senior staff and the SOC manager.
- Handles sensitive information in accordance with the Corporate Information Protection Policy.
Preferred Skills
- Understanding of Information Security concepts and frameworks.
- Working knowledge of the use of DLP (e.g., O365, Proofpoint) / SIEM / IT Ticketing technologies.
- Knowledge of data security, classification, and handling best practices.
- Strong written and oral communication, documentation, organizational, and collaboration skills.
- Rigorous attention to detail and strong analytical capability.
Position Qualifications
- Bachelor's Degree in Computer Science, Engineering, Information Systems, or Cyber Security or High School Diploma OR GED and 8 years progressive relevant experience
- 4 years of experience in information security/technology experience
- 3 years of experience in security event triage and investigation with DLP/data protection experience preferred
- 3 years of experience working with DLP capabilities such as data classification and tagging tools, CASB, content filtering and network proxies
- 3 years of experience using standard monitoring, logging, and alerting tools
- This position is not eligible for sponsorship. Must have indefinite employment authorization.
About Comerica
We know our employees are critical to our overall success and we are dedicated to investing in their future. One of the ways we do this is to offer a comprehensive Total Rewards package designed to recognize and reward individual performance, as well support health, well-being, development and security for our colleagues and their family. Total Rewards consists of cash compensation, development and flexible benefit programs designed to meet individual needs today and in the future. Your salary will be commensurate with your work experience and our programs are reviewed regularly to ensure each remain competitive. We are proud to offer benefits such as health and welfare programs, strong retirement benefits, and generous paid time off programs. You and your eligible family members, including domestic partners and their children, can participate in medical, dental, and vision benefits, 401(k) and pension, income protection benefits such as life insurance, AD&D, and supplemental health programs to offset unexpected health care expenses. We also have a variety of time off programs for things like vacation, sick time, disability, and parental leave. Eligibility for some programs varies based on employment status and tenure.
Upon offer, Comerica conducts a comprehensive background and fingerprint check. Your fingerprints will be used to check the criminal history records of the FBI and may be subscribed in the FBI's Record of Arrest and Prosecution Background ("RAP Back") service, which provides ongoing notification to the Company of any updates to your criminal history.
NMLS certification requirement: where applicable, a favorable background check screening, credit check, fingerprint check, and NMLS certification is required in accordance with the SAFE Act.
Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, and strategically aligned into three major business segments; the Commercial Bank, the Retail Bank, and Wealth Management. Comerica's colleagues focus on relationships, and helping people and businesses be successful. In addition to Texas, Comerica Bank locations can be found in Arizona, California, Florida and Michigan, with select businesses operating in several other states, as well as in Canada and Mexico.
Comerica is proud to be an Equal Opportunity Employer - disability/veteran.
|
Comerica Bank
life insurance, parental leave, paid time off, sick time, 401(k)
Jun 13, 2025