Information Protection Specialist

About the role

ALST is hiring an Information Protection Specialist in Madrid. The role covers where sensitive data lives, how it is classified and how it is protected across its lifecycle, on-premises, in cloud storage and in transit. It owns the practical mechanics of data security: classification schemes, DSPM/DLP tooling, access controls over sensitive repositories and secure migration of data between platforms.

Key responsibilities

• Maintain and evolve the organisation's data classification scheme, reflecting real data types and business context.
• Run and interpret DSPM scans to identify sensitive data location, exposure and ownership.
• Align classification outputs with DLP policy so protection is applied consistently.
• Design, implement and tune DLP policies across email, endpoint and cloud channels, reducing false positives while catching genuine exposure.
• Review and tighten access controls over file shares, NAS and collaboration platforms based on classification and least-privilege principles.
• Support encryption, tokenisation and retention control decisions for sensitive data stores.
• Support migration projects moving data from legacy or unmanaged storage (e.g. NAS) to governed platforms (e.g. SharePoint/OneDrive), including risk assessment of the target environment.
• Assess cloud storage configurations (sharing settings, external access, retention) against organisational policy.
• Use DSPM/CASB/CSPM tooling to keep visibility as data moves across environments.
• Produce clear, non-technical guidance for employees on data handling changes.
• Partner with IT and business unit owners to drive adoption of new data protection controls.

Required profile

• Citizen or permanent resident of the country of application, or able to obtain a valid working visa.
• Ability to apply online with a resume and cover letter.