Sr. Data Protection Analyst

Job Description

The Sr. Data Protection Analyst is responsible for securing Aramark's data as it moves through AI and SaaS tools - treating data as the root lever for hardening AI adoption across the enterprise. Working independently, this role designs Data Protection control strategy across AI and SaaS access vectors, discovers and routes unsanctioned tool usage to sanctioned alternatives, assesses data exposure risk within agentic and orchestration platforms, and turns findings into clear recommendations for technical and business stakeholders.

This position sits within Aramark's Cyber Security organization, specifically the AI Security & Governance team, with expected collaboration across other Cyber Security, Technology, Compliance, Privacy, and embedded business application and platform owner teams.

Job Responsibilities

Data Protection Policy & Control Recommendations

• Advise on Data Protection policy and controls across the range of AI and SaaS access vectors, including browser, thick-client applications, and agentic AI access points.
• Design Data Protection control strategy across AI and SaaS tools, independently determining the appropriate control (block, redirect, allow-with-monitoring) based on each tool's risk profile, and bringing high-risk or non-standard decisions to AI Security & Governance leadership for review.
• Partner with platform/tooling owners to implement repeatable Data Protection controls.

Shadow AI & SaaS Discovery

• Discover unsanctioned SaaS and AI tool usage across monitored access points.
• Collaborate with security, technology, and business stakeholders to guide end users to sanctioned applications at the point of access.
• Conduct recurring gap analysis identifying shadow AI/SaaS usage where no enterprise-approved alternative currently exists.

AI & Agentic Platform Data Assessment

• Lead Data Protection assessments for agentic/orchestration platforms (e.g., Microsoft Copilot Studio, Salesforce Agentforce), recommending baseline platform Data Protection controls.
• Review connected data sources for access/permissions exposure and validate data classification accuracy.
• Assess externally facing AI system outputs and third-party model data configurations for sensitive information disclosure.

Cross-Functional Collaboration & Escalation

• Contribute to Data Management policy creation and revision across departments, bringing a data protection and AI risk perspective.
• Document and escalate data exposure findings to the appropriate risk owner or governance body.
• Maintain operational priorities, status, and KPIs for enterprise Data Protection posture, and report on them to AI Security & Governance leadership.

Qualifications

Education/Experience

• Bachelor's degree in Cybersecurity, Information Technology, or related field; equivalent experience considered.
• 5+ years of experience in data security, data protection, data loss prevention, or information security analysis, including hands-on work with DLP or DSPM controls.

Technical Skills

• Understanding of Data Protection/DLP concepts including data classification, access controls, and policy enforcement across SaaS and AI tools.
• Familiarity with agentic and orchestration AI platform architectures and associated data exposure risks (e.g., Microsoft Copilot Studio, Salesforce Agentforce).
• Experience with browser-based Data Protection platforms (e.g., Chrome Enterprise Premium, Island, Netskope).
• Familiarity with Data Security Posture Management (DSPM) and/or Data Loss Prevention platforms (e.g., Microsoft Purview, Varonis, Netskope, Cyera).
• Experience reviewing third-party model data handling and configuration (e.g., data retention, training opt-out settings).

Soft Skills

• Analytical mindset with strong problem-solving skills.
• Ability to partner with cross-functional teams across Cyber Security, Technology, Compliance, and business stakeholders.
• Clear communicator able to translate technical data risk into actionable recommendations.
• Comfortable driving outcomes through influence and recommendation rather than direct authority.
• Works independently on complex, non-routine problems, seeking review at key decision points.

About Aramark

Our Mission

Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet.

At Aramark, we believe that every employee should enjoy equal employment opportunity and be free to participate in all aspects of the company. We do not discriminate on the basis of race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, protected veteran status or other characteristics protected by applicable law.

About Aramark

The people of Aramark proudly serve millions of guests every day through food and facilities in 15 countries around the world. Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet. We believe a career should develop your talents, fuel your passions, and empower your professional growth. So, no matter what you're pursuing - a new challenge, a sense of belonging, or just a great place to work - our focus is helping you reach your full potential. Learn more about working here at http://www.aramarkcareers.com or connect with us on Facebook, Instagram and Twitter.