Senior Data Security Governance Analyst - U.S. Based Remote Opportunity
About The Position
Common App is a national not-for-profit organization dedicated to the pursuit of access, equity, and integrity in the college admission process. Each year we support more than 1 million students, one-third of whom are first-generation, as they apply to our more than 1100 diverse member colleges & universities using the Common App's free online application. Common App is currently searching for a Senior Data Security Governance Analyst. This role plays a critical role in advancing the organization’s Enterprise Information Management (EIM) strategy, with a focus on data security, protection, and responsible data use. The role leads the implementation of EIM Data Security initiatives and supports SOC 2 readiness by defining and operationalizing enterprise data security governance policies, standards, and controls, ensuring they are consistently applied across systems, workflows, and teams. Working in close partnership with Technical Operations, Cybersecurity, Legal, and business units, the analyst establishes and governs data classification, secure PII handling, and access control frameworks, while collaborating with technology teams responsible for technical implementation. The role also advances governance capabilities to support AI and advanced analytics workflows, ensuring appropriate data use, auditability, and alignment with privacy and regulatory requirements. By embedding governance into day-to-day operations and enabling scalable approaches to control implementation, documentation, and monitoring, this role ensures that data is secure, compliant, and trusted, while supporting its effective and responsible use to drive organizational value.
Requirements
- Candidates must live in the United States.
- Willing to travel to attend twice annual Common App Retreat.
- Bachelor’s degree in Information Management, Data Science, Statistics, or a related field.
- 5-8 years of experience in data security governance, data risk management and compliance, and analytics.
- Experience developing, implementing, and maintaining data security governance framework and programs, including creating standards, policies, data classification framework, and access controls in alignment with the broader data governance strategy and data stewardship practices.
- Strong knowledge of data security governance principles, including data classification, data lifecycle management, and PII protection.
- Familiarity with SOC 2 framework and controls, including experience supporting audit readiness, control documentation, and evidence collection.
- Familiarity with security implementation metrics, security adoption metrics, data protection metrics, and security incident metrics.
- Understanding of data governance considerations for AI and advanced analytics, including data usage controls, model input governance, and risks related to sensitive data exposure.
- Understanding of regulatory and compliance requirements related to data privacy and security (e.g., GDPR, CCPA, or similar frameworks.
- Experience operationalizing governance within data platforms (e.g., data warehouses, ETL pipelines, semantic layers).
- Ability to translate policies and standards into practical, scalable processes and implementation requirements.
- Knowledge of access control models (e.g., role-based access, least privilege) and data security best practices.
- Strong analytical and problem-solving skills, with the ability to assess risk and identify control gaps.
- Experience working cross-functionally with technical and non-technical stakeholders, including Security, Legal, and business teams.
- Excellent written and verbal communication skills, including the ability to document standards and influence adoption.
- Strong organizational skills and attention to detail, particularly in managing governance artifacts and audit-related materials.
- Ability to manage multiple priorities and drive work forward in a complex, evolving environment.
- Familiarity with data tools and environments (e.g., cloud data platforms such as Databricks).
Nice To Haves
- Master’s or doctoral degree in Information Management, Data Science, Statistics, or a related field.
- Background in regulatory or policy compliance related to data management.
- Experience in data security governance, data management, privacy regulations and compliance, and analytics in higher education.
- Familiarity with data visualization tools such as Tableau or Power BI for governance reporting.
- Familiarity with higher education data definitions and architecture.
Responsibilities
- Lead the implementation of EIM Data Security initiatives.
- Support SOC 2 readiness by defining and operationalizing enterprise data security governance policies, standards, and controls.
- Ensure consistent application of data security policies, standards, and controls across systems, workflows, and teams.
- Establish and govern data classification, secure PII handling, and access control frameworks in partnership with Technical Operations, Cybersecurity, Legal, and business units.
- Collaborate with technology teams responsible for technical implementation of data security controls.
- Advance governance capabilities to support AI and advanced analytics workflows, ensuring appropriate data use, auditability, and alignment with privacy and regulatory requirements.
- Embed governance into day-to-day operations.
- Enable scalable approaches to control implementation, documentation, and monitoring.
- Ensure data is secure, compliant, and trusted.
- Support the effective and responsible use of data to drive organizational value.
Benefits
- Work-Life balance
- Virtual-first office
- Paid Time Off (PTO)
- Seven company-wide holidays
- Nine floating holidays
- Sick leave
- Monthly mental health day
- Virtual-first support
- Choice of PC of MAC laptop
- May choose an external monitor, keyboard, mouse, and/or headset
- One-time office set-up stipend
- Monthly remote work stipend
- Monthly mobile stipend
- Market-based salaries
- Performance-based bonus
- 403(b) retirement plan
- 5% company contribution
- additional 5% company match
- 3-year vesting schedule
- Participation may begin immediately
- Choice of two health insurance plans
- Health Savings Account, depending on health plan selection
- Medical Flexible Savings Account, depending on health plan selection
- Vision insurance
- Dental insurance
- Insurance coverage begins on the date of hire
- Dependent Care Flexible Spending Account
- Maven virtual clinic for women’s and family health
- Company provided life and ad&d insurance
- Opportunity to purchase additional life insurance for self, spouse, and dependents
- Company provided short and long-term disability insurance
- Budgeted annual funds for professional development
- Growth opportunities within the company
- Mutual of Omaha Employee Assistance Program
- Mutual of Omaha will preparation services
- Mutual of Omaha travel assistance
- Payroll dedication pet insurance through PinPaws
- 1Password family account
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
