Data Security Administrator

Empower Federal Credit Union•Syracuse, NY

2d•$86,103 - $129,154•Hybrid

About The Position

The Data Security Administrator is responsible for ensuring that Empower FCU’s data security tools effectively identify, classify, label, and monitor sensitive information within the credit union’s network, and that controls designed to protect the data are operating effectively. This role is a key member of the Information Security team, with a focus on data loss prevention (DLP), data exfiltration, and insider threat mitigation. The Data Security Administrator will collaborate with data owners to optimize least-privilege access and minimize data replication, and work with the Compliance team to manage data retention and deletion according to policies and regulations. Additionally, the role serves as a subject matter expert in the use of Artificial Intelligence (AI) with respect to data security, advising leadership on secure AI usage and associated risks.

Requirements

3 to 5 years of relevant experience in Data Security, Data Governance, Information Governance, Data Lifecycle Management, Data Loss Prevention (DLP), or related disciplines, preferably in the financial industry (credit union, banks, etc.).
Experience with Microsoft Purview, Microsoft 365 security technologies, or comparable data protection, governance, and compliance platforms.
Bachelor's degree in a relevant field (e.g., Information Security, Risk Management, Data Science).
Alternatively, candidates may qualify through a combination of relevant certifications or specialized training in related technologies or disciplines along with job-specific experience.
Strong knowledge of data security, data governance, privacy, and information lifecycle management principles.
Ability to analyze security events, identify trends, and recommend practical risk mitigation strategies.
Strong written and verbal communication skills, including the ability to present recommendations to technical and non-technical stakeholders.
Demonstrated project management and organizational skills, with the ability to manage competing priorities.
Ability to exercise discretion and maintain confidentiality when handling sensitive business and member information.
Continuous learning mindset with the ability to adapt to evolving technologies, regulatory requirements, and cybersecurity threats.
Availability to participate in security investigations and incident response activities as needed.
Ability to communicate positively with diverse populations and foster an inclusive culture.
All candidates will be subject to a background check to determine employment eligibility.
For roles that require an NMLS you may be subject to a credit check.

Nice To Haves

Experience in the financial industry (credit union, banks, etc.)

Responsibilities

Act as the subject matter expert on data security management and controls through the full data lifecycle, from generation to archiving and deletion.
Work in close partnership with the IT and Compliance teams on data governance, classification, data ownership, retention and deletion.
Lead the day-to-day operation of Microsoft Purview, including responding to alerts, fine-tuning configuration settings and strengthening policies as both the credit union and the available tools change over time.
Assist as needed with eDiscovery and data security investigations.
Ensure data security and governance procedures and related documentation remain current and accurate.
Assist as necessary with employee training in the credit union’s data security and governance practices.
Identify, classify, and inventory sensitive information across systems, repositories, and collaboration platforms to support the credit union's data governance and security objectives.
Maintain metrics and reports related to data classification, DLP incidents, risk activity, and overall program effectiveness.
Support internal and external audits, reporting, and testing, as they pertain to data security.
Act as the subject matter expert for approved artificial intelligence (AI) systems and AI-powered technologies used within the credit union. Advise Information Security management, Project Management and other stakeholders on security when new uses for AI or AI-powered technologies are considered.
Maintain appropriate security controls on approved AI systems and enhance controls to detect, alert on and block the use of unapproved AI systems.
Monitor emerging AI-related security, privacy, and regulatory risks and recommend appropriate controls, policies, and governance practices.
Assist in employee training as necessary, regarding secure AI system usage.
Assist the Information Security team in cyber security incident handling, particularly as it relates to data security.
Seek ways to strengthen data security controls based on lessons learned to avoid similar events in the future.
Perform all other duties as assigned.