Insider Threat Analyst IV (Data Loss Prevention)

Overview

As a Senior Data Loss Prevention Analyst, you will play a critical role in leading the analysis and investigation of escalated DLP alerts and events, ensuring that sensitive data is protected in alignment with Navy Federal's security policies and regulatory obligations. This role is highly collaborative, requiring close partnership with teams across Security Operations, IT, Legal, HR, and Business Units to drive a unified and effective approach to data protection.

In addition to technical expertise, this role demands a strategic mindset and strong communication skills to support and mature the end-to-end Data Loss Prevention program. You will be instrumental in identifying and addressing gaps in detection, response, and policy enforcement, while also helping to shape the future direction of the DLP program through cross-functional engagement and continuous improvement initiatives.

• Lead DLP investigations across email, endpoint, web, and cloud environments, ensuring timely and accurate response to potential data loss events.
• Serve as a senior escalation point for DLP alerts, providing deep technical analysis and contextual risk assessments to inform remediation and reporting.
• Drive the strategic development and continuous improvement of the enterprise DLP program, including integration and optimization of CASB, web proxy, endpoint, and email DLP technologies.
• Develop and implement detection strategies to identify and mitigate AI-related data leakage risks, including unauthorized use of generative AI tools, large-scale data scraping, and model training on sensitive or proprietary data.
• Collaborate cross-functionally with Security Operations, Legal, HR, IT, and Business Information Security Officers (BISOs) to ensure alignment of DLP controls with organizational risk posture and regulatory requirements.
• Lead and support strategic initiatives to enhance DLP visibility, coverage, and automation, including policy development, rule tuning, and data classification efforts.
• Provide technical leadership and mentorship to junior analysts, fostering a culture of analytical rigor and operational excellence.
• Develop and deliver metrics, dashboards, and executive-level reporting to communicate DLP program effectiveness and emerging risks.
• Represent the DLP function in enterprise security architecture discussions, audits, and compliance reviews.
• Maintain subject matter expertise in data protection trends, insider risk, and evolving threat landscapes to inform program strategy and tooling decisions.

• 5+ years of experience in cybersecurity with a strong focus on Data Loss Prevention, Insider Risk, or Information Protection, preferably in a regulated industry such as financial services.
• Senior-level knowledge of DLP technologies and architectures, including CASB, endpoint DLP, email DLP (e.g., Microsoft Purview), and web proxy integrations.
• Demonstrated experience leading investigations relevant to complex data loss scenarios, including insider threat, misconfiguration, and third-party risk.
• Strong understanding of data classification, encryption, and access control models as they relate to data protection.
• Proven ability to lead cross-functional initiatives and influence stakeholders across technical and non-technical domains.
• Advanced knowledge of SIEM platforms, UEBA, and forensic tools to support investigative workflows and incident response.
• Experience developing and implementing DLP policies, tuning detection rules, and reducing false positives through iterative improvement.
• Exceptional written and verbal communication skills, with the ability to translate technical findings into actionable insights for executive leadership.
• Relevant certifications such as CISSP, SANS GIAC, Network+, or Microsoft Information Protection certifications are not required but preferred.