Data Security Analyst
Experis -- Long-term opportunity that has potential to go perm. 100% remote. CISSP certification preferred. The Cybersecurity Data Security Analyst reports to Data Protection Strategist, with responsibility to help modernize the Cybersecurity Data Protection Program. As a data security subject matter expert, this individual will liaise with internal stakeholders and business users, performing a gap analysis of business use cases and existing access and data security controls. The Data Security Analyst is expected to leverage results of the gap analysis to propose enhancements to tools, techniques and processes, influencing the overall data security strategy and roadmap. Responsibilities Engages with business partners and other internal stakeholders, performing gap analysis of existing access and data security controls Identify available tools in the market and perform cost-benefit analyst against existing tooling Help devise and recommend data security strategy, roadmap and program-related items with leaders across the organization, based on results of gap analysis Collaborates with GRC team on the implementation and maturation of security controls against industry-recognized security frameworks and standards such as NIST CSF, NIST 800-53 and ISO 2700x Updates leadership on current data security risks as it pertains to enterprise sensitive data Creates and presents business case proposals for investment as needed Supports IT and Cybersecurity efforts to monitor user authentication and access behavior to detect unusual or at-risk behaviors Works with the Cybersecurity CISO Program Office to identify useful data for collection and track/report on cybersecurity metrics; delivers metrics-driven scorecards/dashboards to keep executive leadership apprised of business cybersecurity health Ability to identify access and data security gaps throughout the Information Lifecycle and recommend techniques and tools to improve data security and prevent data loss Assess and recommend enhanced logging and monitoring capabilities to better track/monitor the usage of sensitive data as it lives and moves throughout structured and unstructured repositories Qualifications Master's degree in Computer Science, Cybersecurity, Information Security, Management Information Systems, Information Technology, Engineering, or related field, or equivalent work experience Practical understanding and experience building/designing/operating data protection technologies to include: Data Loss Prevention, Cloud Access Security Broker, Data Access Governance, Encryption/Tokenization/Obfuscation/Masking, Rights Management, Database Security, Email Security, Endpoint Security, UEBA, Logging & Monitoring 10+ years of enterprise experience in Data Security, Information Governance, and Privacy working in a large technology firm with a global footprint Security and privacy industry certifications such as Certified Information Systems Security Professional (CISSP); IAPP CIPT, CIPP/E/US, Fellow of Information Privacy (FIP) Experience with setting strategy for access and data security controls in big data and multi-cloud data environments Strong knowledge of Data Security Control Standards and ProceduresPlease send resume to Rhonda.Crafton1@Experis.com.
ManpowerGroup is an Equal Opportunity Employer
Job Type:Contract
Location:Durham, NCDistance:
1 mile
Date Posted:Sep 18, 20202 days ago
Industry:IT
Experis -- Long-term opportunity that has potential to go perm. 100% remote. CISSP certification preferred. The Cybersecurity Data Security Analyst reports to Data Protection Strategist, with responsibility to help modernize the Cybersecurity Data Protection Program. As a data security subject matter expert, this individual will liaise with internal stakeholders and business users, performing a gap analysis of business use cases and existing access and data security controls. The Data Security Analyst is expected to leverage results of the gap analysis to propose enhancements to tools, techniques and processes, influencing the overall data security strategy and roadmap. Responsibilities Engages with business partners and other internal stakeholders, performing gap analysis of existing access and data security controls Identify available tools in the market and perform cost-benefit analyst against existing tooling Help devise and recommend data security strategy, roadmap and program-related items with leaders across the organization, based on results of gap analysis Collaborates with GRC team on the implementation and maturation of security controls against industry-recognized security frameworks and standards such as NIST CSF, NIST 800-53 and ISO 2700x Updates leadership on current data security risks as it pertains to enterprise sensitive data Creates and presents business case proposals for investment as needed Supports IT and Cybersecurity efforts to monitor user authentication and access behavior to detect unusual or at-risk behaviors Works with the Cybersecurity CISO Program Office to identify useful data for collection and track/report on cybersecurity metrics; delivers metrics-driven scorecards/dashboards to keep executive leadership apprised of business cybersecurity health Ability to identify access and data security gaps throughout the Information Lifecycle and recommend techniques and tools to improve data security and prevent data loss Assess and recommend enhanced logging and monitoring capabilities to better track/monitor the usage of sensitive data as it lives and moves throughout structured and unstructured repositories Qualifications Master's degree in Computer Science, Cybersecurity, Information Security, Management Information Systems, Information Technology, Engineering, or related field, or equivalent work experience Practical understanding and experience building/designing/operating data protection technologies to include: Data Loss Prevention, Cloud Access Security Broker, Data Access Governance, Encryption/Tokenization/Obfuscation/Masking, Rights Management, Database Security, Email Security, Endpoint Security, UEBA, Logging & Monitoring 10+ years of enterprise experience in Data Security, Information Governance, and Privacy working in a large technology firm with a global footprint Security and privacy industry certifications such as Certified Information Systems Security Professional (CISSP); IAPP CIPT, CIPP/E/US, Fellow of Information Privacy (FIP) Experience with setting strategy for access and data security controls in big data and multi-cloud data environments Strong knowledge of Data Security Control Standards and ProceduresPlease send resume to Rhonda.Crafton1@Experis.com.
ManpowerGroup is an Equal Opportunity Employer