Mid-Level Data Loss Prevention Analyst – Cybersecurity Operations

Job Offer: Mid-Level Data Loss Prevention Analyst – Cybersecurity Operations

Unleash the power of cybersecurity—protecting data at the core of banking innovation.

Kraków-based opportunity with hybrid work model (minimum 6 office days per month, up to 4 remote days per week).

About the Role
As a Mid-Level Data Loss Prevention Analyst, you will be working within a global cybersecurity team dedicated to safeguarding HSBC’s critical data assets. Operating in the Cybersecurity Operations unit, you will play a vital role in detecting, analyzing, and responding to data-related incidents, ensuring compliance with regulatory standards and protecting sensitive information across a 24x7 operational environment. This is your chance to contribute to a leading financial institution’s security fabric while advancing your expertise in DLP technologies and incident management.

Your main responsibilities:

• Monitor and protect HSBC’s internal, restricted, and highly restricted data using global DLP tools like Symantec, Zscaler, Microsoft Purview, and CASB solutions.
• Follow detailed security incident response processes, including triage, investigation, escalation, and documentation.
• Manage and coordinate responses with local and regional teams, supporting swift remediation.
• Support shift handovers by maintaining comprehensive incident logs, current status, and key findings.
• Collaborate with cybersecurity and IT teams to refine policies, reduce false positives, and automate workflows for efficiency.
• Cultivate strong stakeholder relationships to support remediation actions and boost cybersecurity awareness.
• Contribute to policy refinement, data lifecycle management, and vulnerability identification within a regulated banking environment.
• Identify automation opportunities and implement scripting or tooling solutions to streamline security operations.

You’re ideal for this role if you have:

• At least 3 years of hands-on experience working with DLP tools such as Symantec, Zscaler, Microsoft Purview, CASB or similar.
• Proven knowledge of incident triage, threat analysis, and data classification concepts.
• Strong understanding of GDPR, banking security standards, and legal compliance regulations.
• Experience in policy creation, fine-tuning, and false positive reduction in a security environment.
• Familiarity with security incident response lifecycle and managing shift handovers in 24x7 operations.
• Excellent organizational and stakeholder management skills.
• Fluent English (spoken, read, and written).
• Eligibility to work in Europe.

It is a strong plus if you have:

• Certification in cybersecurity, data protection, or related fields.
• Experience using scripting languages (e.g., PowerShell) for automation.
• Knowledge of operational security standards in banking environments.

Language Required for the role:
Fluent English (spoken, read, and written).

Eligibility to work in Europe:
Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER
Interested? Apply now with your CV (preferably in English), including your consent for data processing, and take the next step in your cybersecurity career.