[Remote] Cyber Security Analyst II, Data Protection
Note: The job is a remote job and is open to candidates in USA. The AES Corporation is a Fortune 500 company leading the charge in the global energy revolution. They are seeking a Cyber Security Analyst II to provide technical leadership in data protection, ensuring effective incident response, documentation, and compliance with data protection standards.
Responsibilities
• Provide technical leadership for detection and response workflows by triaging data protection events, validating true positives, conducting root cause analysis, and driving containment and remediation actions with stakeholders
• Maintain and refine processes and procedures for effective data protection, including incident response plans and data classification schemes
• Ensure comprehensive documentation of data protection measures, procedures, metrics and training materials is maintained and regularly updated
• Drive data protection awareness and education programs across the organization to promote a secure data handling culture
• Collaborate with cross-functional teams to align data protection strategies with organizational goals and regulatory requirements
• Support the evaluation of emerging data protection technologies and best practices to enhance the organization’s security infrastructure
• Oversee the development and implementation of data governance frameworks to ensure compliance with data protection standards, laws and regulations
• Support the maintenance of data protection dashboards and reports by defining metrics and data requirements, integrating relevant telemetry to ensure data quality and consistency
• Conduct regular reviews of data access controls and policies to align with enterprise standards and regulations
• Facilitate cross-departmental collaboration to ensure data quality and consistency across the organization
• Support create and standardize data protection processes to prevent, detect, and respond to potential data breaches
• Develop and maintain training programs and procedures to ensure AES People are knowledgeable in data protection best practices
• Implement continuous improvement practices to enhance data protection measures and adapt to evolving threats
• Monitor and support reporting on the effectiveness of data protection strategies to senior management and stakeholders
• Provide guidance on data protection impact assessments for new projects or technologies
• Support the response to data protection incidents, ensuring timely reporting and resolution in accordance with SLA’s, legal and regulatory obligations
• Establish and enforce data governance policies to manage enterprise data effectively
Skills
• Minimum of 4 years of experience working within a security organization, ideally with a focus on process and governance oversight
• A candidate must possess an analytical mindset to support the continuous optimization of Data Loss Prevention (DLP) and Insider Threat processes and procedures through automation and other optimization techniques
• Proven experience in leading cyber security initiatives
• Knowledge of SIEM/SOAR technologies, Microsoft security tools, and enterprise proxy solutions for DLP and insider risk management
• Understanding of data protection laws and regulations, such as GDPR, CCPA, etc
• Exceptional communication skills, capable of effectively engaging with both technical and non-technical audiences on data protection issues
• Knowledge of data lifecycle management, data classification, and data governance principles and practices
• Strong organizational skills, with the ability to manage and take ownership of multiple priorities in a dynamic environment
• Candidate must have experience as an analyst on an Insider Threat, Security Operation Center (SOC), or Incident Response (IR) team
• Advanced certifications in data protection, privacy, or security domains, such as CIPP/E, CIPT, CIPM, CISM, CISSP, etc
• Comprehensive knowledge of data protection regulations and frameworks (GDPR, CCPA, NIST, ISO 27001, etc.)
• Ability to coordinate data protection assessments and audits
• Exceptional analytical and problem-solving abilities
• Proven track record of successful collaboration with cross-functional teams and executive stakeholders
• Basic understanding of Operational Technology environments
Company Overview
• The world no longer thinks of energy as a matter of supply and demand. Now it’s a space for innovation and partnership. It was founded in 1981, and is headquartered in Arlington, Virginia, US, with a workforce of 5001-10000 employees. Its website is http://www.aes.com.
Company H1B Sponsorship
• The AES Corporation has a track record of offering H1B sponsorships, with 11 in 2025, 6 in 2024, 8 in 2023, 9 in 2022, 7 in 2021, 12 in 2020. Please note that this does not guarantee sponsorship for this specific role.
Responsibilities
• Provide technical leadership for detection and response workflows by triaging data protection events, validating true positives, conducting root cause analysis, and driving containment and remediation actions with stakeholders
• Maintain and refine processes and procedures for effective data protection, including incident response plans and data classification schemes
• Ensure comprehensive documentation of data protection measures, procedures, metrics and training materials is maintained and regularly updated
• Drive data protection awareness and education programs across the organization to promote a secure data handling culture
• Collaborate with cross-functional teams to align data protection strategies with organizational goals and regulatory requirements
• Support the evaluation of emerging data protection technologies and best practices to enhance the organization’s security infrastructure
• Oversee the development and implementation of data governance frameworks to ensure compliance with data protection standards, laws and regulations
• Support the maintenance of data protection dashboards and reports by defining metrics and data requirements, integrating relevant telemetry to ensure data quality and consistency
• Conduct regular reviews of data access controls and policies to align with enterprise standards and regulations
• Facilitate cross-departmental collaboration to ensure data quality and consistency across the organization
• Support create and standardize data protection processes to prevent, detect, and respond to potential data breaches
• Develop and maintain training programs and procedures to ensure AES People are knowledgeable in data protection best practices
• Implement continuous improvement practices to enhance data protection measures and adapt to evolving threats
• Monitor and support reporting on the effectiveness of data protection strategies to senior management and stakeholders
• Provide guidance on data protection impact assessments for new projects or technologies
• Support the response to data protection incidents, ensuring timely reporting and resolution in accordance with SLA’s, legal and regulatory obligations
• Establish and enforce data governance policies to manage enterprise data effectively
Skills
• Minimum of 4 years of experience working within a security organization, ideally with a focus on process and governance oversight
• A candidate must possess an analytical mindset to support the continuous optimization of Data Loss Prevention (DLP) and Insider Threat processes and procedures through automation and other optimization techniques
• Proven experience in leading cyber security initiatives
• Knowledge of SIEM/SOAR technologies, Microsoft security tools, and enterprise proxy solutions for DLP and insider risk management
• Understanding of data protection laws and regulations, such as GDPR, CCPA, etc
• Exceptional communication skills, capable of effectively engaging with both technical and non-technical audiences on data protection issues
• Knowledge of data lifecycle management, data classification, and data governance principles and practices
• Strong organizational skills, with the ability to manage and take ownership of multiple priorities in a dynamic environment
• Candidate must have experience as an analyst on an Insider Threat, Security Operation Center (SOC), or Incident Response (IR) team
• Advanced certifications in data protection, privacy, or security domains, such as CIPP/E, CIPT, CIPM, CISM, CISSP, etc
• Comprehensive knowledge of data protection regulations and frameworks (GDPR, CCPA, NIST, ISO 27001, etc.)
• Ability to coordinate data protection assessments and audits
• Exceptional analytical and problem-solving abilities
• Proven track record of successful collaboration with cross-functional teams and executive stakeholders
• Basic understanding of Operational Technology environments
Company Overview
• The world no longer thinks of energy as a matter of supply and demand. Now it’s a space for innovation and partnership. It was founded in 1981, and is headquartered in Arlington, Virginia, US, with a workforce of 5001-10000 employees. Its website is http://www.aes.com.
Company H1B Sponsorship
• The AES Corporation has a track record of offering H1B sponsorships, with 11 in 2025, 6 in 2024, 8 in 2023, 9 in 2022, 7 in 2021, 12 in 2020. Please note that this does not guarantee sponsorship for this specific role.