Data Security Administrator

Data Security and Governance

• Act as the subject matter expert on data security management and controls through the full data lifecycle, from generation to archiving and deletion.
• Work in close partnership with the IT and Compliance teams on data governance, classification, data ownership, retention and deletion.
• Lead the day-to-day operation of Microsoft Purview, including responding to alerts, fine-tuning configuration settings and strengthening policies as both the credit union and the available tools change over time.
• Aid as needed with eDiscovery and data security investigations.
• Ensure data security and governance procedures and related documentation remain current and accurate.
• Assist as necessary with employee training in the credit union’s data security and governance practices.
• Identify, classify, and inventory sensitive information across systems, repositories, and collaboration platforms to support the credit union's data governance and security objectives.
• Maintain metrics and reports related to data classification, DLP incidents, risk activity, and overall program effectiveness.
• Support internal and external audits, reporting, and testing, as they pertain to data security.

Artificial Intelligence Operations

• Act as the subject matter expert for approved artificial intelligence (AI) systems and AI-powered technologies used within the credit union.
• Advise Information Security management, Project Management and other stakeholders on security when new uses for AI or AI-powered technologies are considered.
• Maintain appropriate security controls on approved AI systems and enhance controls to detect, alert on and block the use of unapproved AI systems.
• Monitor emerging AI-related security, privacy, and regulatory risks and recommend appropriate controls, policies, and governance practices.
• Assist in employee training as necessary, regarding secure AI system usage.

Cyber Security Incident Response

• Assist the Information Security team in cyber security incident handling, particularly as it relates to data security.
• Seek ways to strengthen data security controls based on lessons learned to avoid similar events in the future.

Performance Measurements

See Dayforce (HRIS) Performance Management for Goals upon start in role, and annually.

Knowledge and Skills

• Experience: 3 to 5 years of relevant experience in Data Security, Data Governance, Information Governance, Data Lifecycle Management, Data Loss Prevention (DLP), or related disciplines, preferably in the financial industry (credit union, banks, etc.).
• Desirable: Experience with Microsoft Purview, Microsoft 365 security technologies, or comparable data protection, governance, and compliance platforms.
• Education: Bachelor's degree in a relevant field (e.g., Information Security, Risk Management, Data Science). Alternatively, candidates may qualify through a combination of relevant certifications or specialized training in in related technologies or disciplines along with job-specific experience.

Interpersonal Skills

• The ability to build effective working relationships across technology, compliance, legal, and business functions.
• The ability to communicate technical concepts to non-technical audiences.
• The ability to influence decision-making without direct authority.
• The ability to exercise sound judgment when handling sensitive information.
• The ability to collaborate effectively on cross-functional initiatives.

Other Skills

• Strong knowledge of data security, data governance, privacy, and information lifecycle management principles.
• Experience administering Microsoft Purview, Microsoft 365 security technologies, or comparable data protection platforms.
• The ability to analyze security events, identify trends, and recommend practical risk mitigation strategies.
• The ability to write and speak clearly and concisely, including the ability to present recommendations to technical and non-technical stakeholders.
• The ability to manage competing priorities.
• The ability to exercise discretion and maintain confidentiality when handling sensitive business and member information.
• The ability to adapt to evolving technologies, regulatory requirements, and cybersecurity threats.
• The ability to communicate positively with diverse populations and foster an inclusive culture.