Data Loss Prevention Analyst

Bank of America; Denver (CO); Hybrid; USD 80,000 - 120,000; Full time

Job summary

A major financial institution in Denver is seeking an Information Security professional to join their Cyber Defense team. The role involves analyzing data loss events, collaborating with cybersecurity teams, and identifying policy gaps. Candidates should have over 3 years of security experience and knowledge of various security technologies. This position offers a hybrid work environment and opportunities for growth within the industry.

Benefits

Hybrid friendly work environment

Opportunities for career advancement

Collaborative culture

Qualifications

• 3+ years of experience in information security or related technology.
• Strong understanding of DLP technologies and security domains.
• Experience in spotting threats, vulnerabilities and exploitation methods.
• Solid grasp of networking, system security, and common attack vectors.
• Proactive problem solving mindset and strong communication skills.

Responsibilities

• Analyze and respond to Endpoint Data Loss Prevent events.
• Collaborate with cyber security teams on information security goals.
• Contribute to the peer review process for quality assurance.
• Identify and escalate potential policy gaps.
• Engage in team discussions for knowledge sharing.
• Use metrics to recommend and implement risk reductions.

Skills

Cyber Security

Data Privacy and Protection

Problem Solving

Process Management

Threat Analysis

Business Acumen

Data and Trend Analysis

Interpret Relevant Laws, Rules, and Regulations

Stakeholder Management

Access and Identity Management

Data Governance

Encryption

Information Systems Management

Technology System Assessment

Tools

McAfee ePolicy Orchestrator (ePO)

Splunk

JIRA

Confluence

SharePoint

Job description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Overview

The Global Information Security - Cyber Defense team is looking for more than a check-box-filler. We want a data protection powerhouse. You’ll be on the front lines, diving deep into endpoint events, spotting threats before they strike and helping shape the policies that protect our global operations. Your work will directly safeguard our people, clients, and our reputation. If you’re the type who spots a pattern before anyone else, thrives on collaboration across continents, and treats every alert as a puzzle worth solving, you might just be our next team member.

Candidate must be willing to enroll in Associate Investment Monitoring due to the nature of the role and access.

Responsibilities

• Analyze and Respond: Complete daily, continuous analysis of Endpoint Data Loss Prevent events (and others) with accurate results within the defined business SLA.
• Team Up for Impact: Collaborate with cyber security teams to drive both immediate and long-term global information security goals.
• Quality First: Participate in and contribute to the peer review process to maintain consistently high QA results.
• Close the Gaps: Identify and escalate potential policy gaps and enhancements to adapt to evolving risk landscapes.
• Share & Learn: Engage actively in team discussions and knowledge sharing to elevate group expertise.
• See the Bigger Picture: Use event metrics, escalation data, and trend analysis to proactively recommend, design, and implement improvements that reduce risk.

Why You’ll Love Working Here

• Global Impact: Your work will protect systems and data across multiple countries and industries.
• Collaborative Culture: Work alongside smart, driven peers who genuinely value teamwork.
• Hook Interest: Work within a technically complex, fast changing, and dynamic environment.
• Room to Grow: Opportunities to deepen expertise and influence global policies on a team that actively supports advancement.
• Flexibility: Hybrid friendly with opportunities for global collaboration.

Required Qualifications

• Experience: 3+ years of experience in information security or a related technology field.
• Breadth of Knowledge: Strong understanding of different security domains and industry leading DLP technologies.
• Threat Savvy: Experience spotting threats, vulnerabilities, and exploitation methods.
• Tech Literacy: Solid grasp of networking, system security, vulnerabilities, exploits, and common attack vectors.
• Problem-Solving Mindset: Intellectual curiosity, critical thinking, and a drive for proactive solutions.
• Communication Skills: Strong written and verbal skills; able to present technical topics to audiences of all levels.
• Self-Starter Energy: Comfortable navigating a geographically diverse, complex global corporation while collaborating effectively.

Desired Qualifications

• Certifications – Security+, Network+, CEH, CISSP, CySA+, CISA, CCNA, CCNP
• Familiarity with McAfee ePolicy Orchestrator (ePO) – Incident Manager
• Familiarity with Confluence / SharePoint
• Experience with Splunk
• Familiarity with JIRA
• Cloud security understanding with knowledge of CASB and DRM solutions

Skills

• Cyber Security
• Data Privacy and Protection
• Problem Solving
• Process Management
• Threat Analysis
• Business Acumen
• Data and Trend Analysis
• Interpret Relevant Laws, Rules, and Regulations
• Stakeholder Management
• Access and Identity Management
• Data Governance
• Encryption
• Information Systems Management
• Technology System Assessment

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Age requirement: Must at least be 18 years of age.