Guardium Data Analyst (DLP)
Location: Juno Beach, FL
Role Summary
"The Guardium Data Analyst transforms database activity monitoring(DAM) and data protection te\emetry into actionable insights that reduce data-exfiltration risk and strengthen compliance. This ro\e builds analytics and dashboards, tunes policies with engineering, and drives measurable improvements in data security posture across databases, data warehouses/lakes, and cloud data stores.
Key Responsibilities"
• Data Ingestion & Modeling
Ingest, cleanse, and normalize Guardium activity logs, policy events, exceptions, and anomalies; design robust data models for analysis and reporting.
Correlate Guardium events with CMDB/asset inventory, IAM (users/roles), and business service context to prioritize risk."
• Analytics & Detection Tuning
Analyze query patterns, access anomalies, exfil indicators (e.g., large result sets, after-hours access), and privi[eged user behavior; propose policy/rule tuning to reduce fa[se positives."
Identify gaps in monitoring coverage (unprotected databases, missing agents/gateways) and partner with engineering to close them."
• Reporting & Metrics
Build operationa[and executive dashboards (e.g., policy violations, top users/assets at risk, MTTR for investigations, coverage & health of collectors/agents)."
Define and track KPls/KRIs (policy violalion trends, alert fidelity, coverage %, SLA adherence, investigation throughput).
• Compliance & Audit Support"
Produce evidence and reports for control testing(SOX, PCI, HIPAA, GDPR, etc.); maintain lineage and retention of monitoring data."
Support periodic user access reviews (UAR) and privileged activity attestations using Guardium insights."
• Stakeholder Enab\ement
Translate findings into clear narratives and prioritized actions for DBAs, data owners, security operations, and compliance teams."
Contribute requirements and backlog items for platform improvements (new data sources, policies, automations, dashboards)."
Required Qua\ifications
"• Experience: 3—6+ years in data security analytics, database activity monitoring, DLP/data protection, or security operations with strong data analysis responsibilities."
• Technical Skil\s:
Proficiency with SQL for complex querying; strong data transformation skills (e.g., Python or equivalent)."
Hands-on experience with IBM Guardium (DAM, policies, classifiers, reports; Guardium Insights preferred) or equivalent DAM/DLP platforms."
Bl/Visualization expertise (Power BI/Tableau/Looker) with ability to design performant semantic models and measures (e.g., DAX)."
Familiarity with relational and cloud data platforms (e.g., Oracle, SQL Server,
PostgreSQL, MySQL, Snowflake, BigQuery, Azure/AWS managed databases)."
Understanding of IAM concepts (privileged access, service accounts, role-based access (RBAC)) and integration with SIEM/UEBA."
• Domain Knowledge:
Knowledge of data protection requirements and controls (e.g., encrypt1on, masking, tokenization, segregation of duties)."
Awareness of regulatory/compliance frameworks impacting data security (SOX, PCI DSS, HIPAA, GDPR/CCPA).
Soft Skills: Strong communication, data storytelling, stakeholder management, and the ability to turn analysis into pragmatic recommendations."
Thanks,