Data Protection Associate

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

Being a member of IT Cybersecurity & Platform Engineering team, the Data Protection Operations Assocaite is responsible for the day‑to‑day operation of DTCC’s data protection controls, with primary focus on triaging alerts, investigating data risk signals, managing exceptions and supporting remediation across DTCC's Data Protection technologies including DLP, CASB and DSPM.

This role sits in the first line of defense and serves as a key operational interface between security tooling, business users, and IT partners. The Analyst must combine strong analytical judgment with clear communication skills to assess risk, engage stakeholders, and drive timely resolution of data protection issues, while maintaining a consistent and professional user experience

• Monitor, triage, and investigate alerts and findings from: DSPM platforms (e.g., sensitive data discovery, exposure findings, excessive access)
• CASB / cloud security tools (unsanctioned SaaS usage, risky data sharing)
• DLP controls (email, endpoint, web, SaaS, and AI‑related channels)
• Assess alerts for severity, credibility, and business impact, distinguishing true data risk from false positives.
• Prioritize and process alerts in line with defined SLAs and escalation criteria.

• Analyze DSPM findings, engage data owners, application teams, and IT partners to validate findings, recommend and track remediation actions (access reduction, secure configuration, reclassification)
• Support remediation lifecycle through closure, documenting outcomes and residual risk.

• Investigate CASB alerts related to Unsanctioned or high‑risk SaaS usage, Cloud data sharing patterns that may introduce exposure
• Investigate DLP events
• Execute defined response actions, elevate complex cases to Tier 2 engineering or incident response teams as required.

• Serve as a primary operational point of contact for business and IT stakeholders on data protection issues.
• Communicate findings clearly and professionally to non‑technical audiences, explaining:
  • What was detected
  • Why it matters
  • What actions are required
  • Balance risk reduction with user experience, avoiding unnecessary friction that could drive control bypass.

• Identify recurring…