Data Security & Governance Analyst

St. Croix Hospice•Mendota Heights, MN

3d•$90,000 - $100,000

About The Position

Data Security & Governance Specialist Position Overview The Data Security & Governance Specialist is responsible for protecting organizational data assets and ensuring they are properly classified, governed, and used in compliance with regulatory, legal, and internal policy requirements. This role plays a critical part in establishing and maintaining data governance frameworks, implementing data security controls, and leveraging Microsoft Purview to manage data discovery, classification, protection, and compliance across the enterprise.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field (or equivalent experience).
3+ years of experience in data governance, data security, or compliance roles.
Proficiency with Microsoft Purview.
Strong understanding of data privacy principles and regulatory requirements.
Experience with Microsoft 365 and Azure environments.
Ability to pass DHS background study.

Nice To Haves

Experience in regulated industries such as healthcare or financial services.
Familiarity with DAMA-DMBOK, NIST, or ISO 27001 frameworks.
Microsoft certifications such as SC-400 or SC-900.

Responsibilities

Develop, implement, and maintain data governance policies, standards, and procedures.
Ensure data handling practices comply with applicable regulations (e.g., HIPAA, GDPR, CCPA, SOC 2).
Partner with legal, compliance, IT, and business stakeholders to align data governance initiatives with organizational goals.
Support audits, risk assessments, and compliance reviews related to data protection and privacy.
Design and enforce data security controls to protect sensitive and confidential information.
Monitor and mitigate data security risks, including data loss, unauthorized access, and misuse.
Collaborate with cybersecurity teams on incident response and remediation related to data exposure.
Configure and manage Microsoft Purview for data discovery, classification, sensitivity labeling, and DLP.
Implement and maintain data classification schemas and sensitivity labels.
Identify, catalog, and govern structured and unstructured data across Microsoft 365 and Azure.
Develop information protection, retention, and compliance policies.
Produce dashboards and reports to demonstrate governance and security posture.
Performs other duties as assigned.