Lead Security Analyst (DLP/DSPM)

About the role

Gartner's Information Security Team is looking for a Lead Security Analyst to join its Human Cyber Risk & Assessment Team in Irving. The role safeguards the organization from human-centric cyber threats such as phishing, social engineering and insider threats, using information security best practices to identify, assess and mitigate risks. It suits a professional with 5-7 years of experience in information security.

Key responsibilities

• Assess human-centric cyber risks, identifying vulnerabilities and attack vectors such as phishing, social engineering and insider threats.
• Design, implement and manage Data Loss Prevention (DLP) strategies, monitor DLP alerts, investigate incidents and recommend remediation.
• Build programs to detect, analyze and mitigate insider risks, including user behavior monitoring and collaboration with HR and Legal on incident response.
• Stay ahead of emerging threats and advocate for information security best practices across the organization.
• Configure, monitor and optimize security tools, support incident response, and help deliver security awareness training.
• Report on human cyber risk posture and incident metrics, document security processes, and present risk findings to leadership.
• Collaborate with IT Operations, Legal, HR and other security teams, and mentor junior analysts.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field (relevant experience may be considered in lieu).
• 5-7 years of hands-on information security experience focused on human cyber risk, DLP and insider threat.
• Strong understanding of frameworks such as NIST and ISO 27001 and regulatory requirements.
• Excellent written and verbal communication, able to explain risk to non-technical audiences and lead empathetic yet firm remediations.

Required skills

• Hands-on experience with DLP and Data Security Posture Management (DSPM) platforms.
• Email security and endpoint protection tools (device control, USB policy enforcement, local storage monitoring).
• Analyzing security telemetry on cloud platforms such as M365 Purview, Google Workspace and OneDrive/SharePoint.
• Insider risk management methodologies and tools.
• Nice to have: CISSP, CISM, GSEC, Security+, SSAP.

What we offer

• Base salary estimated between 94,000 and 134,000 USD, plus annual bonus or uncapped sales incentive plan.
• Hybrid work, 20+ PTO days plus holidays and floating holidays in the first year.
• Medical, dental and vision insurance, 401K with corporate match, tuition reimbursement and parental leave.
• Ongoing mentorship, leadership and technical courses, certification opportunities and charity match.