Senior Data Loss Prevention Analyst

Responsibilities: Lead complex and sensitive data loss investigations from initial alert through documentation and closure, including cases involving potential insider risk.  Serve as the senior escalation point for the DLP team, providing guidance and second level review on cases requiring advanced analytical judgment.  Design, build, test, and tune DLP policies and detection rules in Microsoft Purview, balancing detection coverage against false positive volume.  Develop and maintain Splunk searches, correlation logic, dashboards, and reports to support DLP investigations, alert triage, and program metrics.  Continuously review the alert queue to identify tuning opportunities, detection gaps, and candidates for new use cases.  Correlate DLP telemetry with other data sources, endpoint, email, cloud, identity, and network logs to build complete pictures of potential data exfiltration.  Support the migration from the legacy DLP platform, including use-case mapping, policy translation, validation testing, and detection parity verification.  Partner with Legal, HR, Compliance, and Privacy on investigations requiring cross functional coordination, and prepare clear written findings for both technical and non-technical audiences.  Mentor junior analysts, document investigative procedures, and contribute to playbooks and runbooks that improve team consistency and efficiency.    Bachelor's Degree in Information Security, Computer Science or any related field and 6 years’ experience; or Master’s Degree and 5 years’ experience; or PhD and 0 years’ experience. Respective years of experience in information security, with demonstrated years focused specifically on data loss prevention or insider risk.  Hands on experience with Microsoft Purview DLP including policy creation, rule tuning, and alert investigation across endpoint, email, and cloud channels. Microsoft Purview Insider Risk Management experience is a strong plus.  Demonstrated Splunk experience, including writing SPL searches, building dashboards and correlation logic, and using Splunk to support security investigations.  Strong analytical and investigative skills, with a proven track record of working complex cases independently and reaching defensible conclusions from incomplete or ambiguous data.  Solid understanding of data classification, regulatory drivers (HIPAA, GDPR, PCI-DSS, or similar), and common data exfiltration methods.  Excellent written communication skills, with the ability to document investigative findings clearly for legal, HR, and executive audiences.  Preferred: 5+ years in information security, with at least 3 years focused specifically on data loss prevention or insider risk.  About AbbVie AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at  www.abbvie.com . Follow @abbvie on  LinkedIn,   Facebook ,  Instagram ,  X  and  YouTube. ​Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: ​ The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future. ​ We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.​ This job is eligible to participate in our short-term incentive programs. ​ Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of  any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law. ​ AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.  US & Puerto Rico only - to learn more, visit  https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: https://www.abbvie.com/join-us/reasonable-accommodations.html