DATA COMPLIANCE INVESTIGATION ANALYST

Descripción del puesto.
Job Description.
Responsibilities - Your Mission In order to enhance compliance in handling sensitive data, (COMPANY NAME) Cyber Security has developed a new capability, the Data Compliance Center (DCC).
The primary goal of the DCC is to ensure that potential non-compliance with sensitive data transfers and hosting (such as Internal Classification and Export Control) is detected, alerted upon, and remediated effectively.
As a Data Compliance Analyst, you will have a key role in safeguarding our organization's data security by investigating and addressing non-compliance issues.
Working at the crossroads of security and compliance, you will employ tools like Splunk SIEM, SOAR, and Jira to analyze, respond to, and report on data compliance alerts.
Your role encompasses a broad range of tasks, including incident response, forensic analysis, alert qualification, and collaboration with data governance stakeholders.
Responsibilities.
Monitor and Respond.
* Continuously monitor data security and compliance alerts generated by the Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) systems.
* Triage and prioritize alerts to ensure timely and effective responses.
* Execute predefined playbooks and workflows to respond to alerts promptly and effectively.
Incident Response.
* Perform initial analysis and investigation of incidents to determine the scope and impact.
* Escalate incidents to relevant teams as necessary.
* Provide detailed incident reports and documentation to support response and remediation efforts.
Detection and Analysis.
* Conduct detailed analysis of alerts to investigate potential breaches, policy violations, or suspicious activities.
* Qualify alerts by distinguishing between genuine threats, false positives, and benign activities.
* Utilize forensic analysis techniques to gather and preserve evidence.
Collaboration and Communication.
* Collaborate with relevant stakeholders, including legal, compliance, and IT teams, to communicate and resolve compliance issues effectively.
* Participate in regular meetings and briefings with the security operations team to discuss ongoing incidents and improvement strategies.
* Support the team in designing and testing new detection use cases and improving existing ones.
Reporting and Documentation.
* Develop and maintain dashboards to monitor and report on compliance metrics and incident response effectiveness.
* Ensure comprehensive documentation of incidents, analysis, and remediation actions.
* Prepare detailed post-incident reports and participate in post-mortem reviews.
Continuous Improvement.
* Evaluate the effectiveness of current detection mechanisms and propose enhancements as needed.
* Stay updated with the latest security threats, compliance regulations, and industry best practices.
* Contribute to the development and refinement of processes, playbooks, and procedures.
Requirements - the ideal candidate will have * Excellent problem-solving skills and the ability to work well under pressure.
* Effective communication skills for collaborating with cross-functional teams.
* Knowledge of incident response processes for security and compliance * Knowledge of security principles, compliance regulations, and privacy laws.
* Detail-oriented with a strong analytical mindset.
* Familiarity with Jira for issue tracking and workflow management.
Benefits - what's in it for you * The chance to work in a multicultural environment.
* The opportunity to grow your skills and capabilities thanks to our (COMPANY NAME) learning offer (digital solutions, classroom sessions, certified training....) and career opportunities across the globe.
* A hybrid working model, allowing you to combine onsite and offsite work.
* A modern office, well connected to public transportation.
* A motivated and fun crew to grow and build and shape the GBS together.
* An intense and exciting onboarding experience.
* Work in a balanced environment.
Beyond the many benefits offered to its employees, joining (COMPANY NAME) is also the guarantee of a respectable work-life balance.
At (COMPANY NAME), we support you to work, connect and collaborate more easily and flexibly.
Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.
This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth.
Company:(COMPANY NAME) Portugal SA Employment Type.
ermanent ------- Experience Level.
rofessional Job Family.
igital By submitting your CV or application you are consenting to (COMPANY NAME) using and storing information about you for monitoring purposes relating to your application or future employment.
This information will only be used by (COMPANY NAME).
(COMPANY NAME) is committed to achieving workforce diversity and creating an inclusive working environment.
We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.
(COMPANY NAME) is, and always has been, committed to equal opportunities for all.
As such, we will never ask for any type of monetary exchange in the frame of a recruitment process.
Any impersonation of (COMPANY NAME) to do so should be reported to emsom@(COMPANY NAME).
om.
At (COMPANY NAME), we support you to work, connect and collaborate more easily and flexibly.
Wherever possible, we foster flexible working arrangements to stimulate innovative thinking