IT Security Analyst

IT Security Analyst - Data Protection M/F

DLA Pharma is a Septodont Group company, a world leader in the manufacture of injectable anesthetics for dentistry. Located in the city of Catanduva (SP), it is one of the largest dental anesthetic factories in Latin America.

The Septodont Group has been on the market for 90 years, able to meet the needs of the dental sector with products for pain control, endodontics, restorative dentistry, infection control and much more. It employs more than 1900 people and has six production units in various parts of the world, two in Brazil, two in France, one in North America and one in India, as well as an international distribution network dedicated to meeting the needs of dental professionals in more than 150 countries.

The IT Security Data Protection Analyst mission is supporting the safeguarding of Septodont data from unauthorized access, use, disclosure, disruption, modification, and destruction. This role is crucial in supporting the implementation of the Data Classification & Protection Program, ensuring compliance with data protection regulations, customer requirements and integrating data security measures across all Septodont ecosystem.

The IT Security Analyst will work in close relationship and collaboration with the global IT Teams and business stakeholders to support the implementation of the Cybersecurity Roadmap.

Main activities and responsibilities:

1. Support the development and implementation of the Data Classification & Protection Program.
2. Ensure consistency of data security controls across services and applications at different Septodont locations globally.
3. Monitor, analyze and respond to data security incidents, collaborating with the Incident Response Team, Managed Security Service Providers (MSSPs), and internal stakeholders.
4. Conduct data security audits and risk assessments.
5. Recommend and implement data security controls.
6. Generate, control, and report data security metrics (KPIs, KRIs, KGIs).
7. Support and collaborate with other IT Security areas such as Incident Response, Security Awareness, Vulnerability Management, and Cyber Risk Management.
8. Perform activities supporting the successful execution of the Cybersecurity Program.

Education: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.

Experience: 2 to 5 years of experience in cyber security, data security or a related role.

Technical Skills:

• Experience with data security assessment tools and techniques.
• Familiarity with data security monitoring tools such as Microsoft Purview, Azure Sentinel, and Crowdstrike Logscale.
• Knowledge of security audit methodologies and tools.
• Ability to translate data security best practices into technical and security controls.
• Ability to develop and implement data protection policies and procedures.
• Understanding of data governance frameworks and the ability to implement data classification and handling procedures.
• Strong understanding of cybersecurity principles and best practices.
• Knowledge of data privacy regulations and compliance requirements.
• Knowledge in Data Loss Prevention (DLP) principles and technologies.
• Familiarity with endpoint detection and response (EDR) tools.
• Knowledge of data protection regulations such as GDPR, PIPEDA and LGPD.

Soft Skills:

• Strong research, collaboration, and quick adaptability skills.
• Excellent verbal and written communication skills.
• Ability to communicate complex data security concepts in simple terms.
• Understanding of human factors in security and how to influence behavior change.
• Strong analytical and problem-solving skills.
• Self-motivated with a high sense of urgency and prioritization.
• Ability to work effectively in a global team and collaborate with other IT and non-IT professionals.