DLP Analyst

About the project

The Global Cybersecurity Operations (GCO) team offers a comprehensive suite of Information & Network Defence services, ensuring detection, monitoring, and incident response for threats. As part of this mission, the Global Data Loss Prevention (GDLP) team plays a critical role in protecting sensitive data and supporting compliance across multiple jurisdictions.

The DLP Analyst role is accountable for monitoring and protecting Internal, Restricted, and Highly Restricted data, managing security incidents, and ensuring rapid, effective responses in collaboration with global teams.

Sounds like your kind of challenge?

Your responsibilities

• Monitor DLP events across multiple tools (e.g., Microsoft Purview, Symantec, Zscaler, CASB) and triage alerts against policies
• Follow incident response playbooks, ensuring timely investigation, escalation, and remediation of potential data loss events
• Collaborate with local/regional DLP teams and the Information Protection Response (IPR) team to evaluate risk and determine containment measures
• Support handovers across time zones, ensuring continuity of incident follow-up and accurate record-keeping
• Assist in policy refinement and tuning to reduce false positives and improve control effectiveness
• Coordinate multiple stakeholders during response phases and assist root cause analysis, corrective action, and prevention measures
• Document incidents and updates in line with internal compliance and reporting requirements
• Proactively identify areas for automation and process improvement to enhance operational efficiency
• Promote information protection awareness when engaging with business and IT stakeholders
• Participate in team meetings, knowledge sharing exercises, and improvement initiatives globally

Our requirements

• Hands-on experience with enterprise DLP solutions, such as Microsoft Purview, Symantec DLP, CASB platforms, and Zscaler tools
• Proven ability in monitoring, triage, and policy tuning for DLP controls
• Strong understanding of incident response methodologies and security frameworks
• Familiarity with data lifecycle management and privacy regulations (e.g., GDPR)
• Knowledge of operating systems, common platforms, and financial sector compliance standards
• Excellent stakeholder management skills with strong collaboration in cross-cultural, global environments
• Proficiency in English (spoken and written), with exceptional communication and reporting skills

Optional

• Experience in global information security operations or in a regulated financial services environment
• Knowledge of automation/orchestration solutions to streamline incident handling
• Understanding of threat landscapes, compliance controls, and audit processes

What we offer

• Hybrid work setup – remote days available depending on the client’s arrangements - 6 days a month from the office in Kraków
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

This is how we work on a project

• Continuous Deployment
• Continuous Integration
• DevOps

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Mindbox Sp. z o.o.

At Mindbox, we connect top IT talents with technology projects for leading enterprises across Europe.

Our focus is on matching your skills with work that matters – projects that use modern tech stacks, solve real business challenges, and give you space to grow. By joining us, you’ll deliver technology solutions for well-known brands, supported by the Mindbox team that values knowledge-sharing and continuous development. We make sure you have the tools, flexibility, and guidance to do your best work – and to keep moving forward in your career.