Information Protection Analyst & Engineer
Merck
Information Protection Analyst & Engineer
Job Description
Job DescriptionAs a key member of the Information Technology Risk Management and Security (ITRM&S) organization, the successful candidate will act as a core member of the Information Protection team. This is a hybrid role featuring a dual focus on both operational DLP and DLP engineering to protect company data. The candidate will be responsible for managing and remediating instances of sensitive data leakage and insider risk, while concurrently configuring, tuning, and maintaining the information protection technologies that prevent them.Responsibilities:Investigate, analyze, and manage security incidents generated from Data Loss Prevention (DLP) and other information protection tools, utilizing log analysis, data visualization, and pattern analysisDesign, build, test, and deploy new DLP policies, rules, and logic across network, endpoint, and cloud environments to address emerging risks and align with the company's data protection strategyManage the full lifecycle of information protection incidents, from detection and escalation through to remediation, ensuring clear communication of status to stakeholders and managementSupport the maintenance, enhancement, and troubleshooting of the information protection technology stack to ensure high availability, accurate detection, and optimal platform performanceDevelop, implement, and maintain automation scripts and processes (e.g., using Python or PowerShell) to improve incident response workflows, reduce manual effort, and enhance reporting accuracyCollaborate closely with the Global Security Group, Legal, Human Resources, and other business units to respond to sensitive incidents in accordance with established corporate policiesContinuously evaluate, improve, and challenge existing processes, procedures, and technical controls to adapt to a fast-moving and evolving security environmentCreate, modify, and review security dashboards and metrics reports to provide actionable insights into the organization’s overall data risk postureRequired Experience and Skills:Proven experience in an information security discipline, with a professional background that includes both active incident response and technical platform implementationStrong, practical experience with Data Loss Prevention (DLP) concepts, methodologies, and enterprise-grade toolsDemonstrated ability to independently investigate and resolve complex security incidents (Tier 2/3 support levels), including performing in-depth root cause analysisHands-on experience with scripting or programming languages (e.g., Python, PowerShell) specifically applied to automation, data extraction, or system integrationExcellent analytical, problem-solving, and written/verbal communication skills, with the ability to convey technical risks to non-technical stakeholdersStrong foundational understanding of networking protocols (TCP/IP), operating system architectures, and cloud security principlesAbility to work effectively in a collaborative team environment, manage shifting priorities, and balance operational emergencies with project-based engineering tasksDesired Experience and Skills:Direct experience with specific DLP and security solutions for network, endpoint, and cloud environments (e.g., Microsoft 365 Purview, Zscaler, CrowdStrike)Experience proactively creating, fine-tuning, and deploying detection policies within security platforms rather than just monitoring existing alertsProven ability to build strong, trusted relationships with cross-functional business and technology stakeholdersUp-to-date knowledge of the current global data protection landscape, privacy regulations, and emerging security threat trendsRelevant industry certifications such as CISSP, CISM, or vendor-specific security engineering certificationsWhat We OfferExciting work in a great team, global projects, international environmentOpportunity to learn and grow professionally within the company globallyPension and health (Canadian Medical) contributionsInternal reward system plus referral program5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contributionCafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport card, Vodafone, Raiffeisen Bank and Foodora discount programsUp-to-date laptop and iPhone, parking in the garage, showers, refreshmentsCompetitive salary, incentive pay, and many moreReady to take up the challenge? Apply now!Know anybody who might be interested? Refer this job!The date shown below is the earliest possible closing date for this posting. However, we sometimes extend the job posting period as needed, so please feel free to apply anytime you see the "Apply" button available. You may also reach out to the recruiter directly via https://www.linkedin.com/in/badumtss/Required Skills: Data Loss Prevention (DLP), Incident Response, Information Security, Microsoft PowerShell, Python (Programming Language), TCP/IP NetworkingPreferred Skills: Critical Incident Stress Management (CISM), Data Protection, Privacy RegulationsCurrent Employees apply HERECurrent Contingent Workers apply HERESearch Firm Representatives Please Read Carefully Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails. Employee Status: RegularRelocation:No relocationVISA Sponsorship:YesTravel Requirements:10%Flexible Work Arrangements:HybridShift:Not IndicatedValid Driving License:NoHazardous Material(s):N/AJob Posting End Date:08/9/2026*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.
Locations
- CZE - Central Bohemian - Prague (IT Riverview)
Skills Required
- information security disciplineintermediate
- Data Loss Preventionintermediate
- scriptingintermediate
Required Qualifications
- Proven experience in an information security discipline, with a professional background that includes both active incident response and technical platform implementation (experience)
- Strong, practical experience with Data Loss Prevention (DLP) concepts, methodologies, and enterprise-grade tools (experience)
- Demonstrated ability to independently investigate and resolve complex security incidents (Tier 2/3 support levels), including performing in-depth root cause analysis (experience)
- Hands-on experience with scripting or programming languages (e.g., Python, PowerShell) specifically applied to automation, data extraction, or system integration (experience)
- Excellent analytical, problem-solving, and written/verbal communication skills, with the ability to convey technical risks to non-technical stakeholders (experience)
- Strong foundational understanding of networking protocols (TCP/IP), operating system architectures, and cloud security principles (experience)
- Ability to work effectively in a collaborative team environment, manage shifting priorities, and balance operational emergencies with project-based engineering tasks (experience)
- Proven experience in an information security discipline, with a professional background that includes both active incident response and technical platform implementation (experience)
- Strong, practical experience with Data Loss Prevention (DLP) concepts, methodologies, and enterprise-grade tools (experience)
- Demonstrated ability to independently investigate and resolve complex security incidents (Tier 2/3 support levels), including performing in-depth root cause analysis (experience)
- Hands-on experience with scripting or programming languages (e.g., Python, PowerShell) specifically applied to automation, data extraction, or system integration (experience)
- Excellent analytical, problem-solving, and written/verbal communication skills, with the ability to convey technical risks to non-technical stakeholders (experience)
- Strong foundational understanding of networking protocols (TCP/IP), operating system architectures, and cloud security principles (experience)
- Ability to work effectively in a collaborative team environment, manage shifting priorities, and balance operational emergencies with project-based engineering tasks (experience)
Preferred Qualifications
- Current Employees apply HERE (experience)
- Current Contingent Workers apply HERE (experience)
Responsibilities
- Investigate, analyze, and manage security incidents generated from Data Loss Prevention (DLP) and other information protection tools, utilizing log analysis, data visualization, and pattern analysis
- Design, build, test, and deploy new DLP policies, rules, and logic across network, endpoint, and cloud environments to address emerging risks and align with the company's data protection strategy
- Manage the full lifecycle of information protection incidents, from detection and escalation through to remediation, ensuring clear communication of status to stakeholders and management
- Support the maintenance, enhancement, and troubleshooting of the information protection technology stack to ensure high availability, accurate detection, and optimal platform performance
- Develop, implement, and maintain automation scripts and processes (e.g., using Python or PowerShell) to improve incident response workflows, reduce manual effort, and enhance reporting accuracy
- Collaborate closely with the Global Security Group, Legal, Human Resources, and other business units to respond to sensitive incidents in accordance with established corporate policies
- Continuously evaluate, improve, and challenge existing processes, procedures, and technical controls to adapt to a fast-moving and evolving security environment
- Create, modify, and review security dashboards and metrics reports to provide actionable insights into the organization’s overall data risk posture
- Investigate, analyze, and manage security incidents generated from Data Loss Prevention (DLP) and other information protection tools, utilizing log analysis, data visualization, and pattern analysis
- Design, build, test, and deploy new DLP policies, rules, and logic across network, endpoint, and cloud environments to address emerging risks and align with the company's data protection strategy
- Manage the full lifecycle of information protection incidents, from detection and escalation through to remediation, ensuring clear communication of status to stakeholders and management
- Support the maintenance, enhancement, and troubleshooting of the information protection technology stack to ensure high availability, accurate detection, and optimal platform performance
- Develop, implement, and maintain automation scripts and processes (e.g., using Python or PowerShell) to improve incident response workflows, reduce manual effort, and enhance reporting accuracy
- Collaborate closely with the Global Security Group, Legal, Human Resources, and other business units to respond to sensitive incidents in accordance with established corporate policies
- Continuously evaluate, improve, and challenge existing processes, procedures, and technical controls to adapt to a fast-moving and evolving security environment
- Create, modify, and review security dashboards and metrics reports to provide actionable insights into the organization’s overall data risk posture
Benefits
- general: Exciting work in a great team, global projects, international environment
- general: Opportunity to learn and grow professionally within the company globally
- general: Pension and health (Canadian Medical) contributions
- general: Internal reward system plus referral program
- general: 5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution
- general: Cafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport card, Vodafone, Raiffeisen Bank and Foodora discount programs
- general: Up-to-date laptop and iPhone, parking in the garage, showers, refreshments
- general: Competitive salary, incentive pay, and many more
- general: Exciting work in a great team, global projects, international environment
- general: Opportunity to learn and grow professionally within the company globally
- general: Pension and health (Canadian Medical) contributions
- general: Internal reward system plus referral program
- general: 5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution
- general: Cafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport card, Vodafone, Raiffeisen Bank and Foodora discount programs
- general: Up-to-date laptop and iPhone, parking in the garage, showers, refreshments
- general: Competitive salary, incentive pay, and many more
Tags & Categories
Answer 10 quick questions to check your fit for Information Protection Analyst & Engineer @ Merck.
10 Questions
~2 Minutes
Instant Score