Senior Analyst, Data Protection

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

Cardinal Health’s Information Security team is on a tremendous growth journey adding several new team members in our Cyber Threat Operations Center, IT Risk and Compliance, and Security Architecture teams.  We aim to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcare’s most trusted partner.  We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empowering talented team members who mentor and uplift others, led by leaders with a maniacal focus on employee development and well-being, dedicated training programs, and a fun and collaborative atmosphere. 

We currently have a career opening for a Data Protection Analyst. Open to employees living anywhere in the United States we are a remote first team with most of our team members working 100% remotely. 

Job Overview:

The entry-level Data Protection Analyst will report to the Manager of the Data Protection Team at Cardinal Health. This analyst will support the data protection engineers in developing and maintaining technology solutions to protect data and will receive direction on various initiatives from the Manager.  The analyst will have direct contact with Data Protection tools including Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), SIEM, EDR, and some Proof-of-Concept Technologies.  This analyst will also play a key role as the Sensitive Data Management program is run and continually aligned with the changing technological landscape as well as industry evolutions and trends.

Accountabilities:

·       Perform analysis and remediation of event/incident traffic within multiple data protection platforms.

·       Continually look for opportunities to reduce the false positive rate in existing or new data protection controls.

·       Communicate technical control improvement opportunities to the data protection engineers.

·       Generate platform-specific reports per management requests and towards the refinement and support of technical controls or processes.

·       Provide bi-directional communication between business units and data protection engineers towards control implementation & refinement.

·       Participate in early adoption testing towards the automation of incident remediation and implementation of data at rest security strategies. 

·       Support the manager and technical lead to define and then implement team processes or technologies, to enable the delivery of data protection roadmap initiatives.

·       Anticipate future data needs and support the development of security controls or processes in collaboration with the data protection team.

·       Support in developing of educational material for business subject matter experts on key requirements for data identification, secure handling, storage, and transfer of sensitive data.

·       Support the manager in collaboration across Information Security teams to aid in the development, growth, and evolution of the Sensitive Data Management Program while advocating for Data Protection tools and techniques.

Qualifications

·       Information Security experience and understanding in developing data protection processes.

·       Prior experience working with data protection technologies.

·       Completed bachelor’s degree in cybersecurity, information security, IT, engineering