Data Loss Prevention & Insider Risk Analyst

Job Description

The Position

As a key member of the Information Technology Risk Management and Security (ITRM&S) organization, the successful candidate will be act as a member of the Information Protection team and be responsible for managing and remediating instances of sensitive data leakage, insider risk and other cyber security incidents related to information protection that occur on our global network and global computing assets. The successful candidate will also participate in other sensitive information protection activities. As part of these duties, the successful candidate will be expected to manage Information Protection (IP) incidents to the point of remediation and clearly communicate any remediation activities and status to colleagues and/or senior management.

What will you do?

• Investigate incidents generated from relevant information protection tools. Using log management tools, packet captures reports, data visualization, and pattern analysis.
• Analyze, escalate, and assist in remediation of information security incidents related to data loss prevention.
• Improve and challenge existing processes and procedures in a very agile and fast-moving information security environment.
• Participation on maintenance of IP policies and rules and associated events.

Qualifications, Skills & Experience Required

• DLP and other information protection tools experience
• Investigating security incidents, Tier-2 support
• Various general technical skills including knowledge of networking (i.e. TCP/IP) and security product experience
• Willingness to acquire in-depth knowledge of network and host security technologies and products
• Demonstrated ability to work in a team environment
• Knowledge of information security policies and best practices
• Strong written and verbal communication skills

Nice to have

• Prior experience as a data loss prevention analyst
• Ability to build strong relationships with business and technology stakeholders, self-motivation, personal drive and high energy are highly valuable for this position
• Experience or familiarity with Data Loss Prevention solutions for network, endpoint and cloud solutions
• Experience or familiarity with content monitoring and user activity monitoring solutions
• Knowledge of current IT Data Protection landscape and upcoming trends in security
• Knowledge of other information security related products is a plus
• Information security industry certification and a legal background is a plus

What we offer

• Exciting work in a great team, global projects, international environment
• Opportunity to learn and grow professionally within the company globally
• Hybrid working model, flexible role pattern (e.g., even 80% full-time is possible in justified cases)
• Pension and health insurance contributions
• Internal reward system plus referral programme
• 5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution
• Cafeteria for tax free benefits according to your choice (meal vouchers, Lítačka, sport, culture, health, travel, etc.), Multisport Card
• Vodafone, Raiffeisen Bank, Foodora, and Mall.cz discount programmes
• Up-to-date laptop and iPhone
• Parking in the garage, showers, refreshments, massage chairs, library, music corner
• Competitive salary, incentive pay, and many more

Ready to take up the challenge? Apply now! 
Know anybody who might be interested? Refer this job!

Current Employees apply HERE

Current Contingent Workers apply HERE

Search Firm Representatives Please Read Carefully 
Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company.  No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails. 

Employee Status:

Regular

Relocation:

VISA Sponsorship:

Travel Requirements:

Flexible Work Arrangements:

Hybrid

Shift:

Valid Driving License:

Hazardous Material(s):

Required Skills:

Communication, Cyber Incident Response, Cybersecurity, Data Leakage, Data Loss Prevention (DLP), Data Loss Prevention (DLP) Operations and Management, Incident Management, Information Protection, Information Security, Information Security Policies, Information Technology (IT) Risk Management, Loss Prevention Control, Management Process, Motivation Management, Packet Capturing, Security Incident Response, Security Solutions, Security Technologies, Self Motivation, Sensitive Information, Stakeholder Engagement, Stakeholder Relationship Management, Teamwork

 Preferred Skills:

Cybersecurity Law, Cyber Threat Analysis, Cyber Threat Intelligence, Security Information and Event Management (SIEM)

Job Posting End Date:

06/23/2025

*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.