{"id":3476760,"url":"https://alion.io/job/hiscox-data-loss-prevention-analyst","title":"Data Loss Prevention Analyst","company":{"id":449838,"name":"Hiscox","domain":"hiscoxgroup.com","url":"https://alion.io/company/hiscox-3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":9,"ghost_share":0,"stale_share":0.556,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Field & Service","role_family":"Field & Service","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lisbon, Portugal","York, United Kingdom"],"countries":["PT","GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-10-29T19:01:59Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-04T21:51:45Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Job Type:\nPermanentBuild a brilliant future with Hiscox\nRole Overview\nThe Data Loss Prevention (DLP) Analyst will support the organisation's DLP capability by performing day-to-day monitoring, triage, and investigation of DLP alerts across network, endpoint, cloud, and email environments.\nReporting to the Cyber Delivery Lead and taking direction from the DLP Team Lead and DLP Project Manager, this role is responsible for reviewing DLP alerts generated from Zscaler, Microsoft Purview, and Mimecast, determining whether events represent genuine data loss risks or false positives, and escalating confirmed incidents to Privacy or Cyber Security teams as appropriate.\nThis is a hands-on operational role focused on improving detection quality, reducing false positives, and ensuring timely and consistent handling of DLP events.\nKey Responsibilities\nDLP Monitoring & Alert Triage\nMonitor DLP alerts across: Zscaler (web and cloud traffic) Microsoft Purview (M365, endpoint, and Insider Risk signals) Mimecast (email DLP and content inspection)\nPerform initial triage of alerts to assess validity, severity, and potential impact\nInvestigate alerts using available context (user activity, data classification, destination, behaviour patterns)\nDistinguish between true incidents, policy violations, and false positives\nIncident Investigation & Escalation\nConduct detailed analysis of confirmed or high-risk alerts to determine: Nature of the data involved (e.g., personal data, confidential, financial) Intent (accidental vs. potentially malicious) Risk level and potential business impact\nEscalate validated incidents to: Privacy teams for potential data breaches or regulatory concerns Cyber Security / SOC teams for insider threat or malicious activity\nEnsure all escalations include clear, well-documented evidence and context\nSupport follow-up investigations when required\nAlert Handling & Case Management\nDocument all alerts, investigations, and outcomes in designated case management tools\nFollow defined Standard Operating Procedures (SOPs) for alert handling and escalation\nMaintain accurate audit trails to support compliance and regulatory requirements\nEnsure timely resolution of alerts in line with defined SLAs\nPolicy Tuning & Continuous Improvement\nIdentify recurring false positives and provide feedback to the DLP Team Lead\nSuggest improvements to DLP rules and policies to enhance detection accuracy\nSupport tuning activities across Zscaler, Purview, and Mimecast\nContribute to reducing alert noise and improving signal-to-noise ratio\nCollaboration & Support\nWork closely with: DLP Team Lead for guidance and escalation handling Privacy, Legal, and Security Operations teams during investigations\nParticipate in review meetings to discuss trends, incidents, and improvements\nAssist in developing and refining operational processes\nReporting & Metrics\nContribute to reporting on: Alert volumes and trends False positive rates Escalation volumes and outcomes\nHighlight emerging risks, unusual activity, or control gaps identified through monitoring\nKey Skills & Experience\nExperience working with enterprise DLP or security monitoring tools (preferred): Zscaler Microsoft Purview DLP Mimecast\nExperience in a Security Operations, SOC, or monitoring/analysis role\nStrong analytical and investigative skills with attention to detail\nAbility to assess risk and make informed decisions on escalation\nUnderstanding of data classification and data protection principles (e.g., GDPR)\nFamiliarity with incident handling and case management processes\nAbility to follow structured processes and document findings clearly\nStrong communication skills, particularly in documenting and explaining incidents\nDesirable Experience\nExposure to Insider Risk or User Behaviour Analytics (UBA)\nExperience working with sensitive data environments (e.g., financial, healthcare, or regulated industries)\nKnowledge of email security and web proxy technologies\nPrevious experience reducing false positives in monitoring systems\nWork with amazing people and be part of a unique culture","description_format":"text","description_chars":4073,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Loss Prevention","Email Security","Property & Casualty Insurance","Reinsurance"],"lifecycle":[{"event":"open","at":"2026-10-29T19:01:59Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":38,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/hiscox-data-loss-prevention-analyst","json_url":"https://alion.io/job/hiscox-data-loss-prevention-analyst.json","meta":{"generated_at":"2026-11-05T03:12:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4201,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449838},"rest":"https://alion.io/mcp/rest/get_company?id=449838"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhiscox-data-loss-prevention-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhiscox-data-loss-prevention-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhiscox-data-loss-prevention-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hiscox-data-loss-prevention-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhiscox-data-loss-prevention-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3476760}},{"tool":"search_jobs","arguments":{"company":"hiscoxgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3476760},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}