Data Loss Prevention (DLP) Analyst

Why Mizuho

At Mizuho, we provide the stability of an international industry leader with the career trajectory of a growing business. Our steady, strategic growth gives our people at all levels rewarding degrees of responsibility and richer work experience than a boutique firm or an established giant could offer alone.

It's the local expertise of our employees that makes our global network so powerful. By collaborating with colleagues and clients who share the same ambition and drive, you can amplify your sphere of influence and base of knowledge as part of one of the largest banks in the world.

Role Overview:

We are seeking an early-career Data Loss Prevention (DLP) Analyst to support collaboration among the Information Security Office, IT Security, and Business Control teams and help maintain alignment with the Technology Control Framework. With guidance from senior team members, the analyst will contribute to the DLP Monitoring Team's efforts to prevent, detect, monitor, and report the loss or unauthorized disclosure of proprietary information across physical, email, web, and other channels throughout MUSO.

Role Scope:

This role assists with DLP operations across Microsoft Purview and Netskope, helping discover, classify, and protect sensitive data—including PII, PCI, PHI, and intellectual property—across endpoints, email, cloud applications, and network channels. With established procedures and team support, the analyst reviews external electronic communications, helps consolidate DLP event reporting, supports incidents from review through closure, and works with Business and Control teams to maintain classification standards and DLP rules. The role also contributes to data protection awareness, training, secure email, and scanning for security gaps in unstructured data.

Key Responsibilities:

• Alert triage: Review reports and centralized incident logs generated by data protection tools.
• Trend analysis: Identify repeat activity, anomalies, and changes in alert severity or significance.
• Investigation: Analyze alerts, eliminate false positives, and determine root causes.
• Communication monitoring: Review email activity for potential policy violations.
• Findings and remediation: Document findings and recommend sustainable solutions that support business processes.
• Rule management: Help design, maintain, and improve DLP rules.
• Escalation: Refer incidents and alerts to Business Unit or team leads when required.
• Incident management: Track response activities, coordinate resolution, and close incidents when remediation is complete.
• Governance reporting: Support KPI and KRI reporting for Risk Committees and other governance forums.
• Awareness and training: Recommend improvements to data protection communications and training for relevant employee groups.
• Case support: Assist with DLP incident triage, escalation, root-cause analysis, and remediation.
• Cross-functional collaboration: Partner with SOC, Legal, HR, and Compliance on investigations involving sensitive data exposure or insider threats.

Qualifications:

• Industry background: Interest in financial services; exposure to corporate banking or capital markets through work, internships, or coursework is a plus.
• Professional experience: One to two years of relevant experience, including internships or comparable project work. Familiarity with information security, data protection, DLP, incident processing, case management, root-cause analysis, SLA-based workflows, reporting, electronic investigations, forensic methods, or log review is helpful.
• Core competencies: Developing analytical, organizational, problem-solving, interpersonal, and communication skills; sound judgment and discretion when handling sensitive information; attention to detail; willingness to learn; and the ability to follow established workflows, adapt to change, manage priorities, and collaborate across teams.
• DLP and governance tools: Familiarity with one or more platforms such as Microsoft DLP, Netskope, Global Relay, Archer, or a data classification tool is preferred; related training or coursework may also be considered.
• Microsoft Office: Proficiency in Word, Excel, and PowerPoint.
• Preferred certifications: Foundational security or data protection training is a plus. CISM, CISSP, CISA, or CIA certification is welcomed but not required.

Company Overview:

Mizuho Pune is an integral part of Mizuho Financial Group, one of the world's leading financial institutions with a strong global presence across the Americas, EMEA, and Asia. Based in India, Mizuho Pune supports Mizuho's international businesses by delivering high-quality, scalable, and resilient services across multiple functions.

Mizuho Pune plays a critical role in driving operational excellence, standardization, and innovation for Mizuho Americas. By combining deep domain expertise with strong process, technology, and analytical capabilities, it partners closely with regional and global teams to support corporate and investment banking, capital markets, and corporate services functions, while adhering to the highest standards of risk management, regulatory compliance, and control.

Mizuho Pune offers competitive compensation and benefits package aligned with industry standards and local market practices.

Mizuho Pune is an equal opportunity employer and is committed to fostering an inclusive and diverse workplace.

Employment is subject to applicable background verification checks in accordance with Indian laws and company policies.

https://www.mizuhogroup.com/asia-pacific/mizuho-global-services/careers