Cybersecurity Analyst

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Technology Regular Full-Time Norwood, OH, US

4 days ago Requisition

The Shepherd Material Science Company is a group of manufacturing companies that develop specialty metal-based chemicals and complex inorganic color pigments. These companies consist of The Shepherd Chemical Company, The Shepherd Color Company, and Glass Coatings & Concepts. Performing meaningful work with trusted, talented colleagues is our formula for success and being a great place to work. Every day, our employees relentlessly pursue Shepherd's Core Purpose and Core Values.

At The Shepherd Material Science Company, cybersecurity is more than a control—it is a practical partnership with the business. We are seeking a hands-on, curious Cybersecurity Analyst to operate and mature our data loss prevention and application security program across Shepherd Chemical, Shepherd Color, Glass Coatings & Concepts LLC, and Shepherd Mirecourt SAS.

This role is ideal for someone who wants to build and improve a data protection program—not simply inherit one. You will administer Microsoft Purview controls, assess enterprise applications, investigate security events, and help colleagues handle sensitive information confidently and appropriately. You will be a service partner, not a gatekeeper.

Responsibilities:

• Administer and maintain Microsoft Purview DLP policies across the Shepherd Microsoft 365 environment, aligned with our four-tier classification model:
  Public, Internal, Confidential, and Highly Confidential.
• Configure and tune sensitivity labels and sub-labels for HR, Financial, Customer, NDA Register, Formulations, ITAR, and Legal information.
• Expand auto-labeling for financial patterns, personally identifiable information, customer pricing, and chemical formulation identifiers.
• Monitor SAP data exported to Excel, Power BI, and SQL Server extracts to confirm correct labeling and storage in approved locations.
• Enforce Microsoft 365 Copilot and Azure AI data boundaries under Shepherd's AI Acceptable Use Policy, including restrictions for Highly Confidential and Formulations data.
• Continuously optimize controls, rules, and detection logic to reduce false positives while minimizing disruption to legitimate work.
• Produce monthly security operations and data protection metrics that support risk-based decisions and continuous improvement.

• Conduct security and risk assessments for new application requests, evaluating data classification, Microsoft Entra e sign-on, SOC 2 Type II controls, data residency, and integration risks.
• Support vendor security assessments, including SOC 2 review and exception documentation for Tier 1 vendors.
• Detect and investigate non-approved applications, services, and technologies; assess risk and drive policy-aligned corrective action.
• Review application access and permissions for alignment with least-privilege and core identity and access management controls.
• Close findings from the September 30, 2026 existing-application review and support the annual application portfolio review.
• Help govern data across its lifecycle—from classification and protection through retention and secure destruction.

• Triage alerts across data protection, identity, email, network, and endpoint security platforms; document findings, remediation actions, and escalations.
• Serve as a first responder for cybersecurity incidents by scoping impact, coordinating containment, documenting response actions, and recommending corrective measures.
• Coordinate with the IS Infrastructure team and Red Canary MDR when incidents extend into endpoint or network threats.
• Create practical data-handling training and job aids that complement Cyber Aware training.
• Support cybersecurity audits, customer security reviews, third-party risk assessments, evidence collection, and security questionnaires.
• Support GDPR controls for Shepherd Mirecourt SAS, including Microsoft Purview data-residency configurations required by the France/EU Supplement.
• Track security trends, Microsoft Secure Score, Microsoft Purview roadmap changes, and emerging data-exfiltration risks; recommend improvements to the IS Applications and Data Manager.
• Travel to local Shepherd sites as business needs require.

• Bachelor's degree in Cybersecurity, Computer Science,…