D

DTCC

Clears and settles securities trades for financial firms

Data Protection Senior Associate

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeJersey City, NJ, USA

About the Job

Requirements

  • At least 6 years of relevant experience.
  • A bachelor's degree or equivalent experience.
  • Experience triaging security or Data Loss Prevention alerts in a production environment.
  • Working understanding of Data Loss Prevention concepts, data classification and sensitivity handling, and AI-related data risk patterns such as sensitive data submission to AI tools.
  • Exposure to AI proxy or AI usage monitoring from an operational perspective.
  • Experience with Microsoft Purview, Zscaler, or similar Data Loss Prevention platforms.
  • Familiarity with tiered security operations and escalation models.
  • Strong Excel and ticketing or case management skills.
  • Strong investigative, documentation, and judgment skills.

Responsibilities

  • Monitor and triage alerts across enterprise Data Loss Prevention enforcement points, including email, endpoint, web, and software-as-a-service channels, as well as AI-related channels such as AI proxy-mediated generative AI interactions, Copilot, and other AI tool usage where alerts are raised.
  • Assess alerts for validity, severity, and potential data exposure, distinguishing true risks from false positives.
  • Prioritize and process events in line with defined service-level agreements and escalation thresholds.
  • Review AI-related Data Loss Prevention events, including sensitive data detected in prompts submitted to AI tools, sensitive content detected in AI responses, and policy violations involving AI agents or copilots.
  • Perform first-level investigations to determine data type and sensitivity, source system and user context, and likely intent versus accidental exposure.
  • Execute defined response actions, including user outreach, enforcement confirmation, escalation, and outcome documentation.
  • Maintain accurate case records for Data Loss Prevention and AI Data Loss Prevention incidents, including investigation notes, actions taken, and resolution status.
  • Escalate complex or high-risk events to Tier 2 engineering, insider threat, or incident response as required.
  • Partner with Identity and Access Management, Cloud Operations, and Insider Threat teams to support remediation activities.
  • Identify recurring false positives, detection gaps, and operational friction within AI and non-AI Data Loss Prevention alerts.
  • Provide actionable feedback to Content Engineering and AI Data Security Engineers to support rule tuning and control improvements.
  • Contribute to improvements in alert routing, triage workflows, and runbooks.
  • Support production of operational metrics related to alert volumes and trends, service-level agreement performance, and AI Data Loss Prevention incident types and outcomes.
  • Ensure operational evidence, including case records and alert artifacts, is complete and audit-ready.
  • Assist with internal reviews or regulatory evidence requests as first-line support.
  • Conduct professional, risk-appropriate interactions with employees when investigating Data Loss Prevention or AI Data Loss Prevention events.
  • Educate users on acceptable use and safe handling of data in AI tools when appropriate, in line with defined scripts and guidance.
  • Support a consistent and measured user experience to avoid unnecessary friction that drives control bypass.

About the Company

DTCC

Clears and settles securities trades for financial firms

DTCC provides the systems financial firms use to complete securities trades after buyers and sellers agree a transaction. Broker-dealers, banks and asset managers use its services to match trade details, calculate obligations, move securities and report transactions. Its NSCC and FICC subsidiaries clear equity and fixed-income trades, while DTC holds securities and handles settlement and payments such as dividends. By offsetting obligations between firms, its clearing services reduce the securities and cash that must change hands, and its repositories maintain derivatives transaction records for regulatory reporting. The parent was established in 1999 and is headquartered in Jersey City, New Jersey.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Jersey City, NJ
Founded
1999

Recently Posted Jobs

Explore more opportunities at DTCC

See more jobs