Sr. Data Protection/Security Analyst

Senior Data Security Analyst

This would be a 1 year contract with a potential start date of the end of June.

Open to 100% remote candidates (working in MST time zone)

Key Responsibilities

• Deliverables
• Develop automation capabilities for data lifecycle processes.
• Participate and build playbooks with SecOps teams, file integrity monitoring alerts and associated response practices.
• Mentor and assist the Data Protection team’s operational and project activities.
• Good understanding of Data Governance principles (e.g., data glossary, ownership, custodian).
• Participate in educating the company and its employees about data protection best practices.
• Lead on business engagement, policy creation, metrics, and on-going program optimization - working with operational departments such as HR, Finance, Internal Audit, Risk and Compliance to identify sensitive data elements to protect with DLP.
• Work closely with other teams within the Information Security Office and Information Services to help facilitate the delivery of secure infrastructure and with application development teams to drive the concepts of privacy and security by design.
• Bring security issues through to closure by engaging all appropriate resources and provide guidance and recommended solutions to complex technical issues.
• Recommend and facilitate the implementation of technical controls to support and enforce defined security policies.
• Be well-versed in all aspects of cybersecurity, with a focus on data protection, privacy, and regulatory compliance, including data governance, inventory, information classification, access authorization and monitoring as it applies to both structured and unstructured data.
• Execute procedures, perform detailed data analysis, reach conclusions, document results, suggest ideas for efficiencies, identify opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios relevant to data protection.
• Perform assessments of the data protection, security/risk posture within the IT network, cloud environment, systems, and software applications, as well as third-party services to recognize relevant issues, quantify associated risks, and facilitate remediation of identified vulnerabilities.
• Assist with governance of our Data Protection Program, including coordination of activities with different technical and business data owners, and implementation of data protection controls.
• Lead and participate in security projects and provide expert guidance on security matters for other technology projects.

The hired individual will be required to lead in the completion of the following deliverables:

• Implementation of Microsoft Defender for Cloud Apps and integration with MIP.
• Management of alerting and balancing effective monitoring policies against operational requirements.
• Building a strong foundational framework for process workflows for prioritization and to evaluate data protection concerns.
• Develop detailed operational manuals for the data protection team, supporting security operation teams and business owners on how to implement information classification, information protection, and data loss prevention controls across our full suite of M365 services and other enterprise grade applications.
• Provide considerable amount of detail to overhaul our Information Classification and Data Protection directives in accordance with industry best practices and CWBFG’s risk appetite.
• Generate workflows and decision trees for business users to consume in order to protect data.
• Provide advisory on the implementation and roadmap for data protection.