DL
Information Protection Analyst
Diverse Lynx India
🇮🇳 India
Hybrid
2 months ago
- triage
- Incident Response
- AI
- ServiceNow
- Microsoft Purview
- DLP
- Zscaler
- SIEM
- Azure
2 months ago
Experience – 6+ Year
Location: PAN India
NP – Immediate/30 Days
Information Protection (IP) Analyst Key accountabilities Alert triage and review Assess data loss prevention and access violation alerts for severity, impact, and priority; perform initial validation, contain or escalate as appropriate, and ensure accurate, timely updates in case management systems. End to end incident response Own incidents from detection to closure from a Data & AI perspective—confirm scope and root cause, coordinate responders, drive containment/eradication/recovery, and capture lessons learned to strengthen playbooks and controls. Log scanning and analytics Execute focused log reviews to identify indicators of unauthorized data movement or misuse; correlate signals across sources to surface patterns and recommend mitigations and control enhancements. Stakeholder coordination and communication Collaborate with enterprise responders, platform owners, legal/privacy, and risk/compliance to ensure clear roles, timely decisionmaking, and alignment with statutory and internal standards. Documentation, metrics, and continuous improvement Maintain complete incident records, evidence, timelines, and metrics; contribute to reporting, trend analysis, and iterative improvement of processes, rules, and detections. Preferred tools and platforms (nice to have) ServiceNow Experience with incident/case management, workflows, assignments, SLAs, knowledge articles, and postincident reporting. OSP Information Protection (IP) Analyst – 6Month Assignment Microsoft Purview Familiarity with DLP policies, information protection labels, insider risk alerts, and investigation workflows, including tuning and exception management. Zscaler (e.g., ZIA/ZPA) Understanding of web/cloud traffic controls, policy enforcement, and log interpretation to identify anomalous egress or exfiltration behaviors. Exposure to SIEM/SOAR solutions (e.g., alert triage, correlation, automation), cloud logs (Microsoft 365, Azure), and endpoint telemetry is beneficial. Equivalent tools are welcome.
Information Protection Analyst · Diverse Lynx India