Data Security Administrator

Empower FCU•Syracuse, NY

4d•Hybrid

About The Position

The Data Security Administrator is responsible for ensuring that Empower FCU’s data security tools effectively identify, classify, label, and monitor sensitive information within the credit union’s network. This role focuses on data loss prevention (DLP), mitigating data exfiltration, and insider threat mitigation. The administrator will collaborate with data owners to enforce least-privilege access and minimize data replication, and work with the Compliance team to ensure data retention and deletion align with policies and regulations. Additionally, the role serves as a subject matter expert in the use of Artificial Intelligence (AI) for data security, advising on secure AI usage and associated risks.

Requirements

3 to 5 years of relevant experience in Data Security, Data Governance, Information Governance, Data Lifecycle Management, Data Loss Prevention (DLP), or related disciplines.
Experience with Microsoft Purview, Microsoft 365 security technologies, or comparable data protection, governance, and compliance platforms.
Bachelor's degree in a relevant field (e.g., Information Security, Risk Management, Data Science).
Alternatively, candidates may qualify through a combination of relevant certifications or specialized training in related technologies or disciplines along with job-specific experience.
Ability to build effective working relationships across technology, compliance, legal, and business functions.
Ability to communicate technical concepts to non-technical audiences.
Ability to influence decision-making without direct authority.
Ability to exercise sound judgment when handling sensitive information.
Ability to collaborate effectively on cross-functional initiatives.
Strong knowledge of data security, data governance, privacy, and information lifecycle management principles.
Ability to analyze security events, identify trends, and recommend practical risk mitigation strategies.
Strong written and verbal communication skills, including the ability to present recommendations to technical and non-technical stakeholders.
Demonstrated project management and organizational skills, with the ability to manage competing priorities.
Ability to exercise discretion and maintain confidentiality when handling sensitive business and member information.
Continuous learning mindset with the ability to adapt to evolving technologies, regulatory requirements, and cybersecurity threats.
Availability to participate in security investigations and incident response activities as needed.
Ability to communicate positively with diverse populations and foster an inclusive culture.

Nice To Haves

Preferably in the financial industry (credit union, banks, etc.)

Responsibilities

Act as the subject matter expert on data security management and controls through the full data lifecycle, from generation to archiving and deletion.
Work in close partnership with the IT and Compliance teams on data governance, classification, data ownership, retention and deletion.
Lead the day-to-day operation of Microsoft Purview, including responding to alerts, fine-tuning configuration settings and strengthening policies.
Assist as needed with eDiscovery and data security investigations.
Ensure data security and governance procedures and related documentation remain current and accurate.
Assist as necessary with employee training in the credit union’s data security and governance practices.
Identify, classify, and inventory sensitive information across systems, repositories, and collaboration platforms.
Maintain metrics and reports related to data classification, DLP incidents, risk activity, and overall program effectiveness.
Support internal and external audits, reporting, and testing, as they pertain to data security.
Act as the subject matter expert for approved artificial intelligence (AI) systems and AI-powered technologies used within the credit union.
Advise Information Security management, Project Management and other stakeholders on security when new uses for AI or AI-powered technologies are considered.
Maintain appropriate security controls on approved AI systems and enhance controls to detect, alert on and block the use of unapproved AI systems.
Monitor emerging AI-related security, privacy, and regulatory risks and recommend appropriate controls, policies, and governance practices.
Assist in employee training as necessary, regarding secure AI system usage.
Assist the Information Security team in cyber security incident handling, particularly as it relates to data security.
Seek ways to strengthen data security controls based on lessons learned to avoid similar events in the future.
Perform all other duties as assigned.