Information Security Analyst

What we do

At Kenvue, we realize the extraordinary power of everyday care. Built on over a century of heritage and rooted in science, we’re the house of iconic brands - including NEUTROGENA®, AVEENO®, TYLENOL®, LISTERINE®, JOHNSON’S® and BAND-AID® that you already know and love. Science is our passion; care is our talent.

Who We Are

Our global team is ~ 22,000 brilliant people with a workplace culture where every voice matters, and every contribution is appreciated.  We are passionate about insights, innovation and committed to delivering the best products to our customers. With expertise and empathy, being a Kenvuer means having the power to impact millions of people every day. We put people first, care fiercely, earn trust with science and solve with courage – and have brilliant opportunities waiting for you! Join us in shaping our future–and yours. For more information, click here.

Role reports to:

Location:

Work Location:

What you will do

Key Responsibilities

Data Protection Operations

• Assist with the implementation and administration of data protection controls.
• Support the deployment and maintenance of Data Loss Prevention (DLP) policies and monitoring solutions.
• Help identify, investigate, and remediate potential data exposure and data leakage risks.
• Participate in testing and validation of security controls.

Security Operations and Engineering

• Assist with the implementation, administration, and optimization of data protection, endpoint security, and email security controls.
• Support deployment and maintenance of Data Loss Prevention (DLP) policies across collaboration, endpoint, and cloud environments.
• Participate in endpoint security initiatives, including malware protection, endpoint detection and response (EDR), device hardening, and security configuration validation.
• Assist with the administration and monitoring of email security technologies, helping to identify phishing, malware, spoofing, and business email compromise threats.
• Contribute to the implementation of Zero Trust security principles across user, device, email, and data protection programs.
• Support integration of security tools and alerts with centralized monitoring and SIEM platforms.

Security Monitoring and Incident Response

• Monitor security alerts related to data protection and assist with investigations.
• Support incident response activities for data security events under the guidance of senior engineers.
• Document findings, lessons learned, and corrective actions.

Compliance and Risk Management

• Assist in validating compliance with company security policies and regulatory requirements.
• Participate in security assessments, audits, and control reviews.
• Support data classification and protection initiatives.

User Awareness and Support Documentation

• Create and maintain security documentation, procedures, and knowledge articles.
• Assist in developing training materials that educate employees on secure handling of company data.
• Promote security best practices across business and technology teams.

Collaboration and Continuous Improvement

• Work closely with security engineers, IT administrators, and business stakeholders on data protection initiatives.
• Assist with implementation of encryption, access control, and least-privilege solutions.
• Stay informed on emerging cybersecurity threats, data protection technologies, and industry best practices.To be updated in 2012

If you are an individual with a disability, please check our Disability Assistance page for information on how to request an accommodation.