Senior Data Loss Prevention Analyst

AbbVie Information Security is looking for a highly motivated experienced and skilled specialist to join the Data Security team. AbbVies Data Security team empowers AbbVie workforce to confidently create and collaborate on life changing medicines while minimizing unauthorized distribution and misuse. The Data Security team is a function within the larger Information Security organization. Join us as Senior Data Loss Prevention Analyst to support and improve our efforts to protect AbbVie sensitive data from insider risks.

This position can be virtual anywhere in the U.S.

The Senior Data Loss Prevention (DLP) Analyst will lead efforts to identify develop and implement data security controls and mitigation capabilities across a variety of infrastructure technologies including endpoint network and cloud services. The Senior Analyst will collaborate with infrastructure and application teams to gain an understanding of technology capabilities and advise them on mechanisms to mitigate insider risk activity while enabling collaboration.

The ideal candidate will have broad experience and knowledge of technology systems applications and networks along with the potential proactive or reactive controls that can be used to enhance the protection of data. They will have the ability to research and communicate technical concepts and configurations to a variety of stakeholders.

Responsibilities:

• Lead complex and sensitive data loss investigations from initial alert through documentation and closure including cases involving potential insider risk. 
• Serve as the senior escalation point for the DLP team providing guidance and second level review on cases requiring advanced analytical judgment. 
• Design build test and tune DLP policies and detection rules in Microsoft Purview balancing detection coverage against false positive volume. 
• Develop and maintain Splunk searches correlation logic dashboards and reports to support DLP investigations alert triage and program metrics. 
• Continuously review the alert queue to identify tuning opportunities detection gaps and candidates for new use cases. 
• Correlate DLP telemetry with other data sources endpoint email cloud identity and network logs to build complete pictures of potential data exfiltration. 
• Support the migration from the legacy DLP platform including use-case mapping policy translation validation testing and detection parity verification. 
• Partner with Legal HR Compliance and Privacy on investigations requiring cross functional coordination and prepare clear written findings for both technical and non-technical audiences. 
• Mentor junior analysts document investigative procedures and contribute to playbooks and runbooks that improve team consistency and efficiency. 

Qualifications :

• Bachelors Degree in Information Security Computer Science or any related field and 6 years experience; or Masters Degree and 5 years experience; or PhD and 0 years experience.
• Respective years of experience in information security with demonstrated years focused specifically on data loss prevention or insider risk. 
• Hands on experience with Microsoft Purview DLP including policy creation rule tuning and alert investigation across endpoint email and cloud channels. Microsoft Purview Insider Risk Management experience is a strong plus. 
• Demonstrated Splunk experience including writing SPL searches building dashboards and correlation logic and using Splunk to support security investigations. 
• Strong analytical and investigative skills with a proven track record of working complex cases independently and reaching defensible conclusions from incomplete or ambiguous data. 
• Solid understanding of data classification regulatory drivers (HIPAA GDPR PCI-DSS or similar) and common data exfiltration methods. 
• Excellent written communication skills with the ability to document investigative findings clearly for legal HR and executive audiences. 

Preferred:

• 5 years in information security with at least 3 years focused specifically on data loss prevention or insider risk. 

Additional Information :

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: 

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location and we may ultimately pay more or less than the posted range. This range may be modified in the future. 
• We offer a comprehensive package of benefits including paid time off (vacation holidays sick) medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs. 

Note: No amount of pay is considered to be wages or compensation until such amount is earned vested and determinable. The amount and availability of  any bonus commission incentive benefits or any other form of compensation and benefits that are allocable to a particular employee remains in the Companys sole and absolute discretion unless and until paid and may be modified at the Companys sole and absolute discretion consistent with applicable law. 

AbbVie is an equal opportunity employer and is committed to operating with integrity driving innovation transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled. 

US & Puerto Rico only - to learn more visit  & Puerto Rico applicants seeking a reasonable accommodation click here to learn more:

Work :

Yes

Employment Type :

Full-time