Sr. Data Protection/Security Analyst

Senior Data Security Analyst

This would be a 4-month contract with a potential start date of the end of June.

Open to 100% remote candidates (working in MST time zone)

Key Responsibilities

• Be well-versed in all aspects of cybersecurity, with a focus on data protection, privacy, and regulatory compliance, including data governance, inventory, information classification, access authorization and monitoring as it applies to both structured and unstructured data.
• Participate in educating the company and its employees about data protection best practices.
• Execute procedures, perform detailed data analysis, reach conclusions, document results, suggest ideas for efficiencies, identify opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios relevant to data protection.
• Participate and build playbooks with SecOps teams, file integrity monitoring alerts and associated response practices.
• Bring security issues through to closure by engaging all appropriate resources and provide guidance and recommended solutions to complex technical issues.
• Work closely with other teams within the Information Security Office and Information Services to help facilitate the delivery of secure infrastructure and with application development teams to drive the concepts of privacy and security by design.
• Good understanding of Data Governance principles (e.g., data glossary, ownership, custodian).
• Lead and participate in security projects and provide expert guidance on security matters for other technology projects.
• Mentor and assist the Data Protection team’s operational and project activities.
• Recommend and facilitate the implementation of technical controls to support and enforce defined security policies.
• Lead on business engagement, policy creation, metrics, and on-going program optimization - working with operational departments such as HR, Finance, Internal Audit, Risk and Compliance to identify sensitive data elements to protect with DLP.
• Deliverables
• Assist with governance of our Data Protection Program, including coordination of activities with different technical and business data owners, and implementation of data protection controls.
• Develop automation capabilities for data lifecycle processes.
• Perform assessments of the data protection, security/risk posture within the IT network, cloud environment, systems, and software applications, as well as third-party services to recognize relevant issues, quantify associated risks, and facilitate remediation of identified vulnerabilities.

The hired individual will be required to lead in the completion of the following deliverables:

• Building a strong foundational framework for process workflows for prioritization and to evaluate data protection concerns.
• Develop detailed operational manuals for the data protection team, supporting security operation teams and business owners on how to implement information classification, information protection, and data loss prevention controls across our full suite of M365 services and other enterprise grade applications.
• Provide advisory on the implementation and roadmap for data protection.
• Generate workflows and decision trees for business users to consume in order to protect data.
• Management of alerting and balancing effective monitoring policies against operational requirements.
• Provide considerable amount of detail to overhaul our Information Classification and Data Protection directives in accordance with industry best practices and CWBFG’s risk appetite.
• Implementation of Microsoft Defender for Cloud Apps and integration with MIP.