Data Protection Analyst

About Acrisure 

A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. By bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services — and more. 

In the last twelve years, Acrisure has grown in revenue from $38 million to nearly $5 billion, with over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible. 

Job Summary 

The Data Protection Analyst is responsible for monitoring, investigating, and responding to data protection, insider risk, and data exfiltration events across the organization. This role serves as a key member of the Cybersecurity team, leveraging Microsoft Purview, ServiceNow, Microsoft 365, and other security technologies to identify, investigate, and mitigate threats involving sensitive company, client, financial, and regulated data. 

The Analyst partners closely with Security Operations, Legal, Human Resources, Privacy, and IT teams to support insider risk investigations, eDiscovery requests, data subject access requests (DSARs), and data protection initiatives. This position plays a critical role in protecting Acrisure information assets while ensuring investigations are conducted in accordance with legal, regulatory, and privacy requirements. 

Success in this role means protecting Acrisure's sensitive data by quickly identifying, investigating, and mitigating insider risk and data protection incidents before they become business, legal, regulatory, or reputational events. You will deliver high-quality investigations, improve detection fidelity, and provide actionable insights that strengthen data protection controls, reduce risk, and support informed decisions across Security, Legal, HR, Privacy, and business leadership. 

Responsibilities:

Insider Risk Operations 

• Monitor and investigate insider risk alerts, suspicious user activity, data exfiltration attempts, and DLP incidents. 
• Conduct investigations related to mass downloads, large-scale sharing, data staging, privileged account misuse, and potential account compromise. 
• Triage and document insider risk cases using the enterprise case management process. 
• Collect, preserve, and analyze evidentiary data in support of investigations. 
• Coordinate with Legal, Human Resources, Privacy, Compliance, and management teams during investigations. 

Data Protection and DLP Monitoring 

• Monitor DLP alerts across Microsoft 365, endpoints, email, SharePoint, OneDrive, Teams, and cloud collaboration platforms. 
• Review policy violations and user justifications to identify repeat patterns, emerging risk, and areas requiring policy tuning. 
• Assist with tuning detection use cases to improve signal quality and reduce false positives. 
• Track and report key metrics including alert volume, true positive rate, time to triage, time to case closure, aged cases, and repeat patterns. 

Investigations and Case Management 

• Support eDiscovery, litigation hold, DSAR, regulatory inquiry, departing employee review, HR investigation, and security investigation activities. 
• Use ServiceNow and Microsoft Purview capabilities to manage investigation workflows a