Senior Analyst, IT Compliance & Risk - Data Protection

What you'll do

• Develop and implement data security governance frameworks aligned with industry standards and company policies.
• Provide front-line support to application teams regarding data privacy and protection requirements.
• Identify data protection gaps for application teams and develop remedial action plans.
• Assess and interpret IT policies and control standards for system and operational compliance.
• Maintain data sources, operational metrics, and documentation such as job-aids and FAQs.
• Ensure compliance with regulations including PCI, SOX, HIPAA, HiTrust, NIST, and others.
• Monitor industry trends and emerging technologies to evolve the company's data protection strategy.

What we're looking for

• Strong knowledge of data protection techniques including obfuscation, masking, classification, encryption, retention, and destruction.
• 3+ years of experience implementing data security and privacy engineering solutions and frameworks.
• Knowledge of IT security regulations and frameworks such as PCI, HIPAA, SOX, SOC1, SOC2, HiTrust, GDPR, CCPA, NIST, and ISO 27001.
• Intermediate to advanced proficiency in MS Excel including pivot tables, lookups, conditional formatting, and Power Query.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
• Security certifications such as CISSP, CRISC, CISA, CISM, or CCSP (preferred).
• Product Management and Program Management experience (preferred).
• Process improvement exposure such as Lean or Six Sigma (preferred).