Data Protection Analyst

Alpine Bank•Grand Junction, CO

7d•Hybrid

About The Position

The Data Protection Analyst is a member of our Information Security team. This role is critical in safeguarding sensitive data across our organization — whether on premises, in the cloud, or within applications. The ideal candidate will have hands-on experience with Microsoft Purview, Data Loss Prevention (DLP) technologies, and cloud-based data governance strategies. Essential role in developing, maintaining, and enforcing policies and controls that ensure confidentiality, integrity, and availability of sensitive data. Administers and manages Microsoft Purview for data classification, labeling, compliance reporting, and lifecycle governance. Implements and maintains Data Loss Prevention (DLP) policies across email, web, endpoints, and cloud environments. Continuously monitors and improves data protection tools to ensure data is inventoried, classified, and controlled on the network, cloud services, and enterprise applications. Collaborates with IT, Information Security, and Privacy teams to design and refine data governance frameworks. Analyzes DLP incidents, investigates potential data breaches, and provides detailed reports and recommendations to stakeholders. Assists with policy creation and enforcement to protect sensitive data aligned with business, legal, and regulatory requirements. Monitors and stays updated on emerging threats, vulnerabilities, and data protection best practices. Regular and reliable on-site attendance is required as an essential function of this position. Other Duties/Responsibilities: Conducts periodic reviews, audits, and assessments to ensure data security controls are functioning as designed. Assists with user awareness training, promoting a data protection mindset across the organization. Works closely with Data Owners, Data Custodians and users to monitor systems. Works closely with other Information Security Analyst, the IT department, multiple outside departments, Alpine employees, and software vendors. Works closely with vendors’ support personnel to resolve issues in a timely and professional manner. Works closely with training and location staff for information security awareness. Performs other duties as assigned. Employees are held accountable for all duties of this job.

Requirements

Able to make decisions without constant supervision.
Good critical thinking and analytical skills.
Detail oriented, able to prioritize tasks effectively, and able to multi-task.
Strong oral and written communication skills.
Strong teamwork ethics.
Willing to be active in department and bank functions, and willing to help with projects.
Exhibits a positive attitude.
Able and willing to work outside of normal schedule during upgrades or system outages.
Excellent customer service skills and ability to resolve issues promptly and effectively.
Bachelor’s Degree in Information Security, or related field, is required.
Microsoft Certified: Information Security Administrator Associate or completed within 1 year of hire.
Microsoft Certified: Security, Compliance, and Identity Fundamentals or completed within 1 year of hire.
CompTIA Security+ is required.
Possession of, or ability to obtain, a valid Colorado Driver’s License required.
Regular and reliable on-site attendance is required as an essential function of this position.

Nice To Haves

Prior knowledge and experience with our existing banking software products is preferred but not required.
Prior IT and/or Information Security experience preferred but not required.

Responsibilities

Developing, maintaining, and enforcing policies and controls that ensure confidentiality, integrity, and availability of sensitive data.
Administers and manages Microsoft Purview for data classification, labeling, compliance reporting, and lifecycle governance.
Implements and maintains Data Loss Prevention (DLP) policies across email, web, endpoints, and cloud environments.
Continuously monitors and improves data protection tools to ensure data is inventoried, classified, and controlled on the network, cloud services, and enterprise applications.
Collaborates with IT, Information Security, and Privacy teams to design and refine data governance frameworks.
Analyzes DLP incidents, investigates potential data breaches, and provides detailed reports and recommendations to stakeholders.
Assists with policy creation and enforcement to protect sensitive data aligned with business, legal, and regulatory requirements.
Monitors and stays updated on emerging threats, vulnerabilities, and data protection best practices.
Conducts periodic reviews, audits, and assessments to ensure data security controls are functioning as designed.
Assists with user awareness training, promoting a data protection mindset across the organization.
Works closely with Data Owners, Data Custodians and users to monitor systems.
Works closely with other Information Security Analyst, the IT department, multiple outside departments, Alpine employees, and software vendors.
Works closely with vendors’ support personnel to resolve issues in a timely and professional manner.
Works closely with training and location staff for information security awareness.
Performs other duties as assigned.