Data Security and Protection Specialist

$118,657 - $141,603/Yr

Patelco Credit Union - Dublin, CA

Full-time - Mid Level

Dublin, CA

Credit Intermediation and Related Activities

About the position

The Data Security and Protection InfoSec Specialist will be responsible for designing, implementing, and maintaining robust measures to protect the security and integrity of data within our organization. The role will analyze data flows, monitor network activities, and identify potential vulnerabilities and risks to sensitive information. The Data Security and Protection Specialist develops and enforces technical policies and procedures, conducts regular audits and assessments, and collaborates with various stakeholders to ensure compliance with data protection regulations and overall data security. The Analyst also provides training and support to employees on data protection best practices.

Responsibilities

• Develops and implements comprehensive data security technical policies, procedures, and guidelines.
• Design and deploy security solutions to safeguard sensitive information.
• Analyzes event metrics to inform and enhance company's security posture and improve existing monitoring and response processes.
• Enhances policies to monitor protected data while in-use, in-transit, and at-rest with response rules to prevent leakage of protected information assets.
• Designs and implements data loss prevention solutions for corporate and production systems.
• Performs data review and analysis to identify and fingerprint information to be protected.
• Partners with business stakeholders to align the DLP function including ensuring data security measures align with business strategies, goals, missions, and objectives.
• Drives and implement technology requirements; engineer and tune alerts generated from DLP systems and other technologies.
• Develops workflows for handling incidents and alerts related to protected data policy infringements.
• Leads DLP rule development lifecycle including policy development, response rules, and maintenance.
• Creates and maintains security controls for cloud-based infrastructure in alignment with enterprise requirements.
• Stay updated on the latest security trends, technologies, and regulatory requirements.
• Recommends and implements improvements to enhance the organization's data protection capabilities.
• Conduct regular security assessments and vulnerability testing to identify and address potential threats.
• Prepare and present security reports to senior management, highlighting key findings and recommendations.
• Provide guidance and training to employees on data security best practices.

Requirements

• Bachelor's degree or equivalent.
• Minimum of 5+ years of experience in information security, with a focus on data protection.
• 5 years' experience designing, implementing, and operating Data Loss Prevention solutions for On-Prem, SaaS and hybrid cloud environments.
• 5 years' experience with scripting and/or development tools used with application integration into IAM and SIEM/SOAR systems.
• 5 years' experience in implementing DLP solutions for cloud email solutions such as Office365.
• Basic understanding of PAM and IAM concepts and knowledge of PCI DSS, HIPAA, GDPR regulations.
• Strong understanding of data protection principles and practices.
• Familiarity with network security, encryption, and data classification.

Nice-to-haves

• Relevant certifications such as CISSP, CISM, or CompTIA Security+ are a plus.

Benefits

• Exceptional Medical, Dental, Vision, and Life Insurance benefits
• Onsite fitness center at HQ and rewards for completing wellness related activities
• Competitive compensation packages with bonus opportunity
• 401(k) with 3% Safe Harbor and 5% employer match
• Discounts on loan products
• Tuition reimbursement
• Employee Assistance Program (EAP)
• PTO for part-time and full-time positions
• Paid holidays
• On-the-job training and skills development
• Internal transfer opportunities for career growth
• Volunteer work
• Flexible work arrangements available for specific positions