Principal Analyst - Tech Compliance

Dreaming big is in our DNA. It's who we are as a company. It's our culture. It's our heritage. And more than ever, it's our future. A future where we're always looking forward. Always serving up new ways to meet life's moments. A future where we keep dreaming bigger. We look for people with passion, talent, and curiosity, and provide them with the teammates, resources and opportunities to unleash their full potential. The power we create together - when we combine your strengths with ours - is unstoppable. Are you ready to join a team that dreams as big as you do?

Dreaming big is in our DNA. It's who we are as a company. It's our culture. It's our heritage. And more than ever, it's our future. A future where we're always looking forward. Always serving up new ways to meet life's moments. A future where we keep dreaming bigger. We look for people with passion, talent, and curiosity, and provide them with the teammates, resources and opportunities to unleash their full potential. The power we create together - when we combine your strengths with ours - is unstoppable. Are you ready to join a team that dreams as big as you do?

AB InBev GCC was incorporated in 2014 as a strategic partner for Anheuser-Busch InBev. The centre leverages the power of data and analytics to drive growth for critical business functions such as operations, finance, people, and technology. The teams are transforming Operations through Tech and Analytics.

Do You Dream Big?

We Need You.

Job Description

Job Title: Principal Analyst - Global Digital Risk & Data Protection

Location: Bangalore (Onsite)

Reporting to: Title of the Manager

PURPOSE OF ROLE

• We are looking for a highly motivated Data Protection Specialist with 5-6 years of hands-on experience in cybersecurity, data protection, and security operations. This role is ideal for a professional who thrives in a fast-paced, global environment and is passionate about protecting enterprise data, reducing insider risk, and strengthening security resilience across modern cloud and hybrid ecosystems.
• You will play a critical role in operating, enhancing, and scaling enterprise data protection capabilities across endpoints, email, cloud applications, collaboration platforms, and business processes. The position requires a blend of technical expertise, operational excellence, stakeholder collaboration, and continuous improvement of mindset.

KEY TASKS AND ACCOUNTABILITIES

Key Responsibilities

Data Protection & DLP Operations

• Manage and continuously improve enterprise Data Loss Prevention (DLP) controls, policies, and operational processes.
• Execute technology roadmaps for DLP platforms to address evolving business needs, data exposure risks, and threat landscapes.
• Implement and optimize controls across data in motion, data at rest, and data in use environments.
• Review existing configurations, recommend enhancements, and support future deployments across enterprise environments.
• Build and maintain dashboards, KPIs, and reporting mechanisms to drive proactive monitoring and risk reduction.

Security Technologies & Controls

Operate and support multiple enterprise security technologies, including:

• Data Loss Prevention solutions
• Microsoft Purview / M365 Security
• Exchange Online Protection
• Retention Policies & Records Management
• Sensitivity Labels & Information Rights Management (IRM)
• Web Proxy / URL Filtering Controls
• Cloud Access Security Broker (CASB)
• Private Access / Zero Trust Access Solutions
• Cloud Data Protection Platforms
• Encryption Solutions
• Password Management / Privileged Access Tools

Incident Response & Risk Mitigation

• Coordinate mitigation of data protection incidents and alerts across multiple geographies/zones.
• Investigate, prioritize, and drive closure of incidents within defined SLAs.
• Identify and mitigate risks related to data leakage, theft, insider threats, and policy violations.
• Support management of high-criticality and case-based security incidents.

Phishing Simulation & Awareness

• Lead end-to-end phishing simulation programs, including:

• Threat trend analysis

• Campaign design & template creation

• Testing & execution

• Validation of results

• Reporting & insights

• Tool administration (e.g., Go Phish)

• Work closely with awareness teams to improve employee cyber resilience.

Encryption & Data Security

• Support deployment and management of enterprise encryption controls across devices, email, databases, and cloud platforms.

• Apply strong understanding of:

• Symmetric Encryption

• Asymmetric Encryption

• Hashing Techniques

• Leverage Microsoft 365 encryption capabilities and other enterprise tools.

Collaboration & Continuous Improvement

• Partner with global teams to understand requirements and execute operational priorities.
• Support workshops, knowledge sessions, and user guidance documentation.
• Be prepared to handle sensitive and high-priority assignments from senior leadership.
• Promote a strong security-first culture and compliance mindset across the organization

QUALIFICATIONS, EXPERIENCE, SKILLS

Education:

• BE/B Tech/MCA in IT, Computer Science or Electronics and Communication or similar qualification

Experience:

• 4 - 6 years of experience in Data Protection, DLP, Security Operations, or Information Security roles.
• Experience working in large, dynamic, and globally distributed environments.

Technical/Functional Skills:

Mandatory Skills:

• DLP platforms (Microsoft Purview, Netskope, Sentinel One, Mimecast)
• CASB
• Cloud Data Protection (VMs, APIs, SPNs, Configs Exposure review etc.)
• Proxy technologies
• Email Security
• Endpoint Security
• Encryption methodologies
• Data security controls
• AI/ML use cases in Security

Preferred (Good to have) Skills:

• HTML/CSS
• Scripting
• Automation
• Phishing tools
• Microsoft 365 Security stack

And above all of this, an undying love for beer!

We dream big to create future with more cheers.