DLP Analyst

Job description

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries. This is a contract opportunity with one of Arctiq's clients. Candidates must be comfortable with a hybrid arrangement in Toronto, Canada. We are seeking a Data Loss Prevention (DLP) Analyst to help protect the organization's sensitive data across endpoints, email, cloud applications, collaboration platforms, and data repositories. This role will monitor and investigate DLP alerts, manage and optimize DLP technologies, and partner closely with Information Security, SOC, Incident Response, Legal, Privacy, and Business teams to strengthen the organization's overall data protection posture. Key Responsibilities Contribute to and support the development of a holistic information protection strategy aligned with business objectives and regulatory requirements. Implement, manage, and support DLP technologies and solutions to monitor, detect, and prevent loss of sensitive data. Partner with Information Security teams to fine-tune detection rules and enhance security monitoring. Participate as required in security incident response efforts for internal security events. Monitor and investigate DLP alerts across endpoints, email, cloud applications, collaboration platforms, and data repositories. Analyze potential data loss incidents and determine risk, impact, and severity. Perform triage, investigation, containment, and escalation of DLP events. Coordinate with the Security Operations Center (SOC), Incident Response, Legal, Privacy, and Business teams during investigations. Document findings, actions taken, and lessons learned from security incidents. Implement, maintain, and optimize DLP policies across enterprise security platforms. Develop and tune detection rules to reduce false positives while maintaining effective data protection. Review and update data classification rules, sensitive information types, and policy exceptions. Ensure DLP controls align with organizational security standards and compliance requirements. Perform other information protection related duties as assigned. Qualifications Bachelor's degree in Information Security, Computer Science, or a related field. 3+ years of experience in information security, with a focus on information protection and data security. Working experience with cybersecurity frameworks and industry standards: ISO 27001/2, PCI DSS, CIS, NIST 800 Series. In-depth knowledge of data protection regulations and standards, with experience implementing controls to achieve compliance. Strong expertise in insider threat frameworks (CERT, NITTF) and security best practices. Hands-on experience with information protection technologies, such as UEBA / DLP. Strong understanding of data classification methodologies and experience developing data handling policies and procedures. Excellent written, verbal, technical, and non-technical communication skills, with the ability to collaborate effectively and influence stakeholders at all levels of the organization. Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply. We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.