Senior Security Consultant - Data Protection - IT

POSITION DESCRIPTION

JOB TITLE: Senior Security Analyst

DEPARTMENT: Information Security

REPORTS TO: Senior Manager, Information Security

OVERVIEW:

- The Security Analyst works within the Cybersecurity and Data Protection function in Information Technology. This role will help support the Data Protection program and privacy compliance activities in accordance with individual security requirements and consumer data privacy regulations.

- The Security Analyst will conduct privacy assessments, support project deliverables, and maintain/enhance the Data Protection program. This role will work with information security, technical teams, lawyers, consultants, cross-functional business partners and third-party business partners to deliver and maintain simple, relevant and actionable data inventories, and logical data flow diagrams.

RESPONSIBILITIES:

- Support the Data Rationalization effort across structured and unstructured systems

- Monitor and analyze data loss prevention alerts across the landscape for 24/7 monitoring

- Support Data Discovery and data classification efforts using various technologies

- Administer and analyze various Data Protection assessments to help maintain various accurate inventories and asset data

- Orchestrate and track Data Subject Rights Requests to meet regulatory obligations

- Represent Data Protection and identify potential concerns on global projects and implementing privacy by design

- Help establish a process to monitor and validate Cloud Applications

- Help build and maintain relevant data privacy maps and data flows that impact personal identifiable information and potential privacy security protections.

- Assist in remediation of Data Protection findings from multiple sources

- Engage as needed and based on expertise to support security incidents and breaches.

QUALIFICATIONS:

- 5-8 years of experience in information security, privacy and risk management

- Strong research, analysis, technical writing and communication skills

- Advanced skills in Microsoft Office software including Visio. Technical writing experience

- Experience in multiple data protection concepts including data loss prevention, data classification, data discovery

- Strong leadership skills and the ability to influence various levels of management

EDUCATION:

- Bachelor's degree in Information Technology/Information Security or equivalent experience in technology

- Certifications preferred: CISSP, CIPP, CISA, CRISC