DLP GSEC Cybersecurity Risk Management Analyst

DLP GSEC Cybersecurity Risk Management Analyst

Location:

Columbia, SC

Job Type: Contract (12 months)

Compensation: DOE

Requirements:

• 3 years experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis.
• 3 years hands‑on experience with data loss prevention (DLP), insider risk management tools, and data security posture management for AI (DSPM for AI).
• 3 years experience reviewing and triaging data‑related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures.
• 3 years of collaborating with technical and non‑technical teams to resolve security issues and support continuous improvement in the agency’s data security posture.

• Experience with AI‑driven security tools, Cortex, particularly DSPM platforms designed to manage sensitive data used by AI systems.
• Experience fine tuning DLP policies, refining insider risk alerts, or supporting data governance programs.
• Familiarity with Azure security, identity‑based access controls, conditional access, and security automation or scripting.

A bachelor’s degree in cybersecurity, information technology, computer science, or a related field is required; equivalent experience may be considered.

Required certifications:
CompTIA Security+ or GIAC Security Essentials (GSEC).

Preferred certifications:
Microsoft SC‑100, SC‑200, CEH, or an Associate level CISSP.

This position supports the agency’s cybersecurity and data protection program by helping protect sensitive information, monitoring security risks, and strengthening controls around AI, Copilot, DLP, Insider Risk, auditing, and vendor security.

• Data Protection & Data Governance
  • Monitor and administer DLP policies and controls.
  • Investigate potential data loss, data exposure, and unauthorized access incidents.
  • Support DSPM initiatives related to AI and Copilot.
  • Review the movement, storage, and sharing of sensitive information.
  • Assist in implementation of data classification and data handling requirements.
  • Participate in data governance initiatives and support data owners and stewards.
• Security Monitoring & Incident Response
  • Review and triage security alerts from DLP, Insider Risk Management, DSPM, and other security platforms.
  • Investigate suspicious activity involving sensitive information.
  • Document findings and maintain investigative records.

EOE Protected Veterans/Disability