Sr. Analyst, Data & Cloud Security; Data Loss Prevention

Why You’ll Love Working Here

• high-performance, people-focused culture
• our commitment that equity, diversity, and inclusion are fundamental to our work environment and business success, which helps employees feel valued and empowered to be their authentic selves
• learning and development initiatives, including workshops, Speaker Series events and access to Linked In Learning, that support employees’ career growth
• membership in HOOPP’s world class defined benefit pension plan, which can serve as an important part of your retirement security
• competitive, 100% company-paid extended health and dental benefits for permanent employees, including coverage supporting our team's diversity and mental health (e.g., gender affirmation, fertility and drug treatment, psychological support benefits of $2,500 per year, parental leave top-up, and a health spending account).
• optional post-retirement health and dental benefits subsidized at 50%
• yoga classes, meditation workshops, nutritional consultations, and wellness seminars
• the opportunity to make a difference and help take care of those who care for us, by providing a financially secure retirement for Ontario healthcare workers

The Sr. Analyst, Data and Cloud Security support the implementation, maintenance, and continuous improvement of HOOPP’s data protection, cloud security, compliance, and risk management controls. This role contributes directly to Data Loss Prevention (DLP), Cloud Security Posture Management (CSPM), data governance practices, and security documentation across cloud, hybrid, and on-premises environments.

Working closely with other members of the Enterprise Data Security, Cyber Awareness and Training team and the wider Information Security team, the Data and Cloud Security Analyst will help enhance our Data Loss Prevention program. The analyst will also help operationalize data security controls, supports escalations to the Director, contributes to training and awareness initiatives, and assists with risk, compliance, and audit activities.

The position plays an important role in ensuring HOOPP maintains a secure, compliant, and resilient data protection posture.

• Support HOOPP’s commitment to safeguarding member data by operating, maintaining and continuously enhancing core data protection and cloud security controls, including DLP, CSPM, and identity-based safeguards.
• Monitor, investigate, and respond to DLP security alerts and data-related incidents, partnering closely with Privacy, Legal, HR, and Technology teams to ensure timely and appropriate resolution.
• Configure and maintain DLP tooling (e.g., Purview, Proofpoint DLP), including policy creation, testing, tuning, and rollout.
• Contribute to incident response, investigations, and operational escalations.
• Monitor tool health, track risks, and support reporting for leadership.
• Maintain and evolve data protection standards, reference architectures, policies, and procedures, ensuring they reflect emerging risks, regulatory requirements, and industry best practices.
• Support internal and external audits, regulatory assessments, and risk reviews through evidence preparation, control validation, and the tracking of remediation activities.
• Support governance, documentation, and audit activities through accurate and timely materials.
• Assist with integrating and optimizing key security technologies.
• Contribute to planning and roadmap discussions for HOOPP’s data protection and cloud security programs, bringing forward insights on threat trends and opportunities for maturity.
• Advance HOOPP’s security culture by supporting the development of training materials, awareness campaigns, and communications that promote secure behaviors across the organization.
• Provide occasional after-hours support when required.

• 3+ years of experience in data or cloud security, compliance, or related functions combined with experience with DLP, investigations, risk assessments, and audit support.
• A strong understanding of cloud and data security domains, including modern DLP practices, CSPM capabilities, and data governance frameworks.
• Hands‑on experience with security tooling such as Purview,…