Data Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide support for organization-wide data classification initiatives within international and governmental contexts.

• Oversee and sustain data classification frameworks, ensuring consistent tagging and management within warehouses and data pipelines.

• Establish and uphold security controls driven by classification within data warehouses.

• Manage requirements for data sovereignty, localization, and cross-border data transfer mechanisms.

• Ensure adherence to international privacy laws and government security protocols.

• Prepare for audits, maintain necessary Authorization to Operate documentation, and implement mandated security measures.

• Safeguard processes for data ingestion, transformation, movement, APIs, SFTP, EDI, and messaging queues.

• Enforce access controls in alignment with data classification, clearance levels, and principles of need-to-know.

• Conduct access reviews and recertifications.

• Assist with risk assessments, vulnerability scans, penetration testing, log monitoring, and SIEM threat detection.

• Aid in security incident investigations and forensic efforts.

• Collaborate with data engineering, compliance, legal, and governmental stakeholders.

• Provide guidance on secure data sharing practices with international partners and government entities.

• Carry out other assigned responsibilities.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related discipline.

• Generally, five (5) years of experience in data security, particularly within international and/or government or public sector settings.

• Practical experience with major cloud and on-premise data platforms in secure environments.

• Background in implementing encryption, key management, DLP, and secure data exchange protocols.

• US Citizenship is a prerequisite.

• In-depth knowledge of data classification frameworks and tools applicable in regulated environments.

• Strong comprehension of international privacy and data protection legislation, including GDPR and Schrems II.

• Solid understanding of U.S. Government standards like FedRAMP, NIST, FISMA, and DoD SRG.

• Familiarity with cloud security and compliance across AWS, Azure, and GCP Government Cloud.

• Proficient in executing security risk assessments and forensic investigations that align with global breach notification laws.

• Capability to translate regulations into practical, automated technical controls.

• Ability to maintain clear, audit-ready documentation.

• Preferred security certifications include CISSP, CISM, CCSP, CRISC, CDPSE, Security+, and CAP.

• Preferred cloud certifications encompass AWS Certified Security, Azure Security Engineer, and Google Cloud Professional Security Engineer.

• Acquainted with Microsoft Purview, Collibra, Alation, and automated classification tools.

• Experience with hybrid/multi-cloud architectures and secure government cloud environments.

• Proficient scripting skills in Python, SQL, and PowerShell.

• Strong analytical, critical thinking, problem-solving, communication, presentation, collaboration, and interpersonal abilities.

• Capacity to work both independently and collaboratively in a fast-paced, dynamic setting.

🏝️ Benefits

• Health, dental, and vision insurance.

• Paid time off and holidays.

• Retirement benefits, including 401(k) matching.

• Educational reimbursement.

• Parental leave.

• Employee stock purchase plan.

• Tax-saving options.

• Disability and life insurance.

• Pet insurance.