Data Protection Senior Associate

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive


• Comprehensive health and life insurance and well-being benefits, based on location


• Pension / Retirement benefits


• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.


• 
  

  DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

  
  

   

The Impact you will have in this role:

Being a member of IT Cybersecurity Engineering and Operations at DTCC, the Data Protection Senior Asscociate supports first‑line operational execution of DTCC’s Data Protection Program, with a primary focus on DLP operations and AI‑related data loss prevention (AI DLP).

This role is responsible for monitoring, triaging, and responding to DLP and AI proxy alerts, validating potential data loss events, and driving remediation or escalation in accordance with established procedures. The Analyst works closely with Content Engineering and AI Data Security Engineering teams to feedback signal quality issues and help improve AI protection outcomes over time.

This is an operational role, not a policy or platform engineering role, but it requires a strong understanding of how AI and DLP controls work in practice to make sound triage and risk decisions. 

Your Primary Responsibilities:

DLP & AI DLP Alert Monitoring and Triage

• Monitor and triage alerts across data protection enforcement points, including: 
  
  
  
  • Enterprise DLP (email, endpoint, web, SaaS)
  
  
  • AI‑related channels (e.g., AI proxy–mediated GenAI interactions, Copilot and AI tool usage where alerts are raised) 
  
  


• Assess alerts for validity, severity, and potential data exposure, distinguishing true risk from false positives.


• Prioritize and process events in line with defined SLAs and escalation thresholds. 

AI Data Loss Investigation & Response

• Review AI‑related DLP events such as: 
  
  
  
  • Sensitive data detected in prompts submitted to AI tools
  
  
  • Sensitive content detected in AI responses
  
  
  • Policy violations involving AI agents or copilots  
  
  


• Perform first‑level investigation to determine: 
  
  
  
  • Data type and sensitivity
  
  
  • Source system and user context
  
  
  • Likely intent vs. accidental exposure
  
  


• Execute defined response actions (user outreach, enforcement confirmation, escalation) and document outcomes.  

Case Management, Escalation & Remediation

• Maintain accurate case records for DLP and AI DLP incidents, including investigation notes, actions taken, and resolution status.


• Escalate complex or high‑risk events to Tier 2 (engineering, insider threat, incident response) as required.


• Partner with IAM, Cloud Operations, and Insider Threat teams to support remediation activities. 

Signal Quality Feedback & Continuous Improvements

• Identify recurring false positives, detection gaps, and operational friction within AI and non‑AI DLP alerts.


• Provide actionable feedback to Content Engineering and AI Data Security Engineers to support rule tuning and control improvements


• Contribute to improvements in alert routing, triage workflows, and runbooks.

Metrics, Reporting & Evidence

• Support production of operational metrics related to: 
  
  
  
  • Alert volumes and trends
  
  
  • SLA performance
  
  
  • AI DLP incident types and outcomes  
  
  


• Ensure operational evidence (case records, alert artifacts) is complete and audit‑ready.


• Assist with internal reviews or regulatory evidence requests as needed (first‑line support role).

Stakeholder Interaction & User Support

• Conduct professional, risk‑appropriate interactions with employees when investigating DLP or AI DLP events.


• Educate users on acceptable use and safe handling of data in AI tools when appropriate, in line with defined scripts and guidance.


• Support consistent and measured user experience to avoid unnecessary friction that drives control bypass.  

NOTE: The Primary Responsibilities of this role are not limited to the details above.*

Qualifications:

• Min 6 years of relevant experience


• Bachelor’s Degree and/or equivalent experience

Talents Needed for Success:

• 5–8+ years (Senior Analyst) in security operations, DLP operations, SOC, or data protection roles.


• Experience triaging security or DLP alerts in a production environment.


• Working understanding of: 
  
  
  
  • Data Loss Prevention (DLP) concepts
  
  
  • Data classification and sensitivity handling
  
  
  • AI‑related data risk patterns (e.g., sensitive data submission to AI tools) 
  
  


• Strong investigative, documentation, and judgment skills.


• Exposure to AI proxy or AI usage monitoring from an operational perspective.


• Experience with Microsoft Purview, Zscaler, or similar DLP platforms.


• Familiarity with tiered security operations and escalation models.


• Strong Excel and ticketing / case management skills

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.