DLP Senior Security Analyst

Calling all originals: At Levi Strauss & Co., you can be yourself — and be part of something bigger. We’re a company of people who like to forge our own path and leave the world better than we found it. Who believe that what makes us different makes us stronger. So add your voice. Make an impact. Find your fit — and your future. Summary of the role: We are looking for a detail-oriented DLP Senior Security Analyst who brings together deep Microsoft Purview experience, a strong GRC foundation, and the hands-on analytical drive to make things happen. In this role, you will implement and enforce our data classification-driven Data Loss Prevention policies, translate compliance requirements into scalable technical controls, and support the rollout of Data Loss Prevention across all of Levi’s.

The Platform Security team at Levi Strauss & Co. is building an enterprise-grade Data Loss Prevention program powered by Microsoft Purview and our data classification framework. As a DLP Security Analyst, you will be a key contributor—supporting policy design, operationalizing sensitivity labels, and driving adoption across Levi’s global M365 and cloud environment. You will bridge the gap between GRC requirements and real-world analytical and engineering execution, ensuring our sensitive data is protected wherever it lives or moves. Key responsibilities include: Design, implement, administer, manage and optimize enterprise DLP platforms across cloud, endpoint, email and network environments. Configure and maintain DLP policies in Microsoft Purview across M365 services (Exchange, SharePoint, Teams, OneDrive) and endpoint environments. Secure Microsoft 365, SharePoint Online, OneDrive, Teams, Exchange Online, and other SaaS platforms using DLP controls. Develop and maintain DLP policies, classifiers, fingerprinting and detection rules. Perform analysis to understand impact of DLP policies before they are implemented. Implement data protection controls for structured and unstructured data across hybrid environments. Ensure DLP policies align with enterprise data classification and information governance standards. Partner with GRC, Legal, and business stakeholders to translate regulatory requirements (GDPR, CCPA, PCI-DSS) into enforceable, auditable DLP controls Participate in audits and provide technical evidence supporting compliance and Support regulatory compliance requirements. Build and maintain DLP monitoring dashboards and analytics using Purview Activity Explorer and Power BI to surface policy gaps, data risks, and program health metrics Support incident response for DLP alerts: investigate, triage, and remediate data exposure events Develop and maintain runbooks, policy documentation, and training materials supporting Levi’s DLP program Contribute to automation and process improvements—leveraging PowerShell or Python scripts where applicable—to help reduce false positive rates and improve operational efficiency About you: 5+ years in information security with 3+ year of hands-on DLP experience preferred Experience with Microsoft Purview—including DLP, Information Protection, Compliance Manager, Insider Risk Management, and Activity Explorer Strong GRC foundation: working knowledge of GDPR, CCPA, PCI-DSS, HIPAA, and enterprise data governance principles including data classification standards Familiarity with PowerShell or Python scripting to support policy deployment, reporting, and alert triage workflows Strong analytical capabilities—able to interpret DLP telemetry, identify trends, and translate data into clear, actionable recommendations Excellent cross-functional communication skills: able to align Legal, Compliance, and business teams around DLP requirements without losing technical depth Benefits: We put a lot of thought into our programs to provide you with a benefits package that matters. Whether it is for medical care, taking time off, improving your health or planning for