Data Security Governance Analyst

Key Responsibilities

• Support the development, maintenance, and implementation of data security and information protection policies, standards, and governance frameworks.
• Ensure data security controls align with enterprise information security governance requirements and regulatory expectations.
• Assist in defining governance requirements for data protection across internal systems and third-party relationships.
• Partner with data governance and privacy teams to align classification, retention, and protection requirements across the data lifecycle.
• Afford oversight of encryption, key management, and data handling controls in alignment with policy.
• Afford audit, regulatory, and internal assurance activities related to data security governance.
• Work with cybersecurity operations, data governance, privacy, legal, risk, and technology teams to embed data security governance into enterprise processes.

Required Skills & Experience

• 8 years of experience supporting data security governance, information protection, or data protection programs in a regulated environment.
• Knowledge of data security principles including data classification, data loss prevention, encryption, and secure data handling.
• Familiarity with information security governance frameworks and policy lifecycle management.
• 5 years of experience supporting risk assessments, control validation, audit responses, or regulatory reporting related to data security.
• Understanding of enterprise data environments, identity and access management, and security architecture as they relate to data protection.
• 5 years of experience working with technical teams to translate policy requirements into operational controls.
• Strong documentation, reporting, and stakeholder communication skills.
• 5 years of experience translating complex data security requirements into clear governance guidance and executive-ready materials.