Data Security Lead

The Data Security Lead leverages extensive experience in information systems and data security to implement and manage platforms and practices that adapt to changing threats over the long term. The Data Security Lead oversees Data Security systems and services and works closely with other IT practice leads to ensure Data Security standards are implemented across the organization.

Candidate must have strong hands-on technical background and must demonstrate familiarity and expertise in the gamut of modern data protection platforms and techniques. Candidate must be highly collaborative and is expected to mentor and partner effectively with other teams on an ongoing basis to facilitate adoption, implementation and ongoing compliance with defined Data Security standards and practices.

• Owns and manages Data Security systems and services,
• Serves as lead engineer supporting PKI/CA, cryptography, secrets management, tokenization, discovery and classification systems and services.
• Contributes to the development and implementation of Information Security Strategy and related roadmaps.
• Works closely with other IT managers and staff to ensure that Data Security is appropriately addressed in the implementation and operation of all IT services, systems and platforms.
• Researches and advocates new solutions to support Data Security requirements of the enterprise, its customers and business partners.
• Maintains deep expertise in how to secure traditional and modern data storage platforms and services.
• Manages Data Security service levels through approved outsourced service providers.
• Adept at automating recurrent workflows.
• Strong conceptual thinking and communication skills - the ability to translate complex business and technical requirements into effective and comprehensible solutions.
• Applies strong logic and principles-based reasoning to define solutions and justify proposals.

Experience/Skills ( 5 -10 yrs )

• Extensive expertise in NIST and ISO 27000 security practice frameworks.
• Extensive hands-on experience with Data Security technologies (e.g. Public Key Infrastructure / Certificate Authority, PGP, SSH, Database encryption, key management, enterprise file encryption, email encryption, datalake protections. )
• Experience securing Cloud infrastructures and services ( Azure preferred )
• Proficiency with scripting / programming languages ( e.g. Python, Ruby, Powershell )
• Familiarity with international data privacy regulations and best practices.
• The following are not essential, but are highly valued;
• Professional experience in application or infrastructure penetration testing
• Demonstrable expertise with configuration automation practices and toolchains (e.g. Chef, Puppet, Ansible, etc…)

Education:

• Bachelor's or master's degree in computer science, information systems or other related field, or equivalent work experience.
• Professional security management certification, such as a ISC(2) Certified Information Systems Security Professional (CISSP), Certified Information Privacy Professional (CIPP), SANS GIAC Information Security Professional (GISP), GIAC-Security Expert (GSE), or GIAC Certified Enterprise Defender ( GCED )