Data Security Governance Analyst

Optomi, in partnership with a leading provider in the Hospitality industry is seeking a Data Security Governance Analyst to join their team! In this role, you will be responsible for coordinating with business units to document business processes, assess data security risks, support mitigation planning and the implementation of security controls. Responsibilities: • Assist in scheduling and facilitating meetings with Data Owners, Data Stewards, and Subject Matter Experts • Create detailed mapping and documentation of sensitive data through the data lifecycle of business processes throughout the organization. • Conduct data security gap analysis and recommend appropriate controls • Support the analysis of access controls, data retention and application usage • Educate and support business partners with the implementation of data security controls and best practices • Documenting and tracking the implementation of remediation efforts to reduce data security risks • Coordinating with project teams to ensure security requirements are applied based on data criticality • Consulting with stakeholders to gather and evaluate functional requirements, review architectural designs and determine impacts to organizational data. • Coordinating with engineers and project teams to ensure security requirements are applied based on the data criticality and impact to the organization. • Ensure accurate classification, retention, and protection of sensitive data assets. Education/Experience: • 5+ years of information technology experience • Experience with tracking and documenting the security control implementation of programs and systems • Experience interpreting security requirements and communicating with various business partners to drive implementation • Experience discovering, cataloging, and protecting sensitive data • Bachelor’s degree in computer sciences, management of Information Systems, Cybersecurity or related field or equivalent experience/certification • Experience with data governance techniques and principles • Experience with implementing or assessing systems against industry security frameworks including NIST, ISO, or PCI • Current information security certification, such as: Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) • Working knowledge of common IT technologies such as Windows/Linux servers, Databases, Web services, etc. • Working knowledge of collaboration tools such as Microsoft Teams, OneDrive, SharePoint, Google and Box • Working knowledge of security tools such as Data Loss Prevention and Sensitivity Labels • Experience with Public Cloud environments such as AWS, Google or Azure • Excellent communication and writing skills along with problem-solving ability • Demonstrated ability to work independently and with others • Experience in business systems and process planning