Data Security Specialist Role

OpenDataJobs•Washington, DC

About The Position

The work Data Security Specialists protect information where it is stored, processed, shared, and accessed. They design and maintain the data-facing controls that let organizations use valuable information while applying least privilege, strong authentication, encryption, classification, monitoring, and accountable access. The role combines security architecture with operational discipline. Specialists work with data owners, platform teams, and governance practitioners to translate risk and control objectives into access policies, key-management practices, entitlement reviews, and auditable data flows. They focus on the protection of data itself, distinct from the infrastructure platform or software-delivery pipeline. What you'll build: · Role-based and attribute-based access patterns for data platforms and services. · Data-classification standards and protective handling patterns tied to access and monitoring. · Encryption, key-management, tokenization, or masking implementations appropriate to the data use case. · Entitlement-review and audit-trail processes that make access decisions visible and accountable. · Data protection controls for exchange, storage, analytics, and artificial intelligence system inputs or outputs when applicable. Who you are: You make security usable without making it optional. You can distinguish a control objective from a particular tool and work with teams to choose enforcement that fits the data, system architecture, and mission. You are precise about identity, authorization, classification, and evidence. You recognize that data protection depends on clear owners and well-defined access decisions, not only on perimeter defenses.

Requirements

Experience with data access governance, authorization models, and entitlement review.
Working knowledge of encryption, key management, tokenization, masking, or similar data-protection controls.
Experience with data classification, audit logging, monitoring, and security incident support.
Knowledge of zero trust principles and how they inform granular data and service access.
Ability to apply National Institute of Standards and Technology (NIST) Special Publication 800-53 security-control concepts to data platforms, exchanges, and analytical workloads.

Responsibilities

Design and maintain data-facing controls.
Translate risk and control objectives into access policies, key-management practices, entitlement reviews, and auditable data flows.
Focus on the protection of data itself.
Build role-based and attribute-based access patterns for data platforms and services.
Develop data-classification standards and protective handling patterns tied to access and monitoring.
Implement encryption, key-management, tokenization, or masking.
Establish entitlement-review and audit-trail processes.
Implement data protection controls for exchange, storage, analytics, and AI system inputs or outputs.
Coordinate with governance teams on policies and ownership.
Retain responsibility for technical data-protection implementation.