Security Analyst, Data Protection

Position Title: Security Analyst, Data Protection

Your Role

The Security Analyst – Data Protection works within the Information Security and Privacy function in Information Technology. This role will help continue to deliver our existing requirements around privacy and compliance efforts, as well as assist with developing new controls in the data protection space. The Security Analyst will be the subject matter expert in using our Data Protection tools to execute on the key pillars of our Data Protection strategy – Identify, Secure, Purge, Monitor, and Govern.  The Data Protection Analyst will also partner with our security architecture and desktop engineering teams on initiatives to secure data-at-rest and data-in-motion. Duties will include executing data discovery and classification scans and validation of findings, maintenance of technical data platform inventory, initiating remediation action to address findings, assisting with Legal Privacy data assessments and data subject rights requests process, and metrics reporting from tooling and processes.

Why You Belong Here

At Victoria’s Secret & Co, you’ll join a world-leading specialty retail brand recognized globally for innovation and excellence in lingerie and fashion. You’ll work alongside industry leaders to set the standard for what a retail brand can achieve, placing customers at the center of everything we do to create products and experiences that bring them joy.

We believe everyone deserves a place where they truly belong. We celebrate individuality and know that your passion, experience, and unique perspective strengthen our team and business. Here, you’ll be empowered to perform, grow, and engage through unmatched opportunities to develop your skills, gain real-world experience, and learn from the best in the business.

Your Impact

• Execute security and data protection requirements to enhance and maintain data security and privacy protections for associates and customers.  This includes helping to onboard new data sources for data discovery and classification scanning, reviewing data security permissions, reviewing for aged files past required retention, and reviewing for compliance with the Enterprise Data Protection Policy.

• Expand capabilities with existing technology and assist in evaluating new technologies for enhancing data at rest and data-in-motion controls, including use of AI.

• Working in conjunction with the data-at-rest platform owners across multiple teams, assist in maintaining a technical inventory of our data repositories in-use across the organization.

• Develop, implement, and maintain operational metrics around the data protection program.

• Recommend and work with technical owners in improving automated controls to enforce data purging past required data retention requirements.

Click here for benefit details related to this position.