Senior Security Analyst-Data Governance

Sony Interactive Entertainment • Washington, DC

295d • $161,000 - $241,600 • Hybrid

About The Position

Sony Interactive Entertainment is seeking an experienced and diligent Information Security Governance Analyst to improve our information governance and data classification program. This role will focus on developing the program, maintaining company policies, and managing the lifecycle of data assets, ensuring they are accurately classified, protected, and handled throughout their entire lifespan. The successful applicant will play a meaningful role in safeguarding SIE's data.

Requirements

• Bachelor's degree in Information Security, Computer Science, a related field, or equivalent experience.
• Excellent knowledge of security frameworks and standards, such as ISO 27001, NIST, and CIS Controls.
• 5+ years in cyber security.
• Demonstrable experience in developing and implementing information governance or data classification programs, preferably in a leadership or supervisory role.
• Practical expertise in assessing and securing hosted applications.
• Strong analytical and problem-solving skills, with the ability to think critically and make informed decisions under pressure.
• Effective communication and interpersonal skills, adept at conveying complicated security concepts to non-technical partners.
• Experience in defining and implementing organizational change, including partner engagement, training, and support.
• Ability to manage multiple projects and priorities in a multifaceted environment.

Nice To Haves

• Background in another field, such as Product Management, Project Management, or Organizational Change Management.
• Knowledge of data protection regulations and best practices.
• Understanding of threat modeling and risk assessment methodologies.
• Familiarity with data management tools and technologies.
• Experience with cloud security, including AWS, Azure, or Google Cloud Platform.
• Exposure to working in global or multi-national companies.
• Professional certifications are helpful, such as CISSP, CISM, or CDMP.

Responsibilities

• Maintain SIE's information security policies, standards, and procedures.
• Develop the information governance and data classification program to ensure consistent classification of data assets based on sensitivity, criticality, and regulatory requirements.
• Identify and classify data assets across the organization.
• Review and improve data lifecycle management procedures, including data creation, storage, usage, sharing, archiving, and destruction.
• Ensure data classification principles are understood by socializing them with departments and teams, and collaborating with training and awareness programs to educate employees.
• Occasionally lend expertise to risk assessments and security incident investigations to support those efforts and identify potential lessons that could inform and drive improvements to the program.
• Monitor compliance with the program and perform regular audits to ensure consistency and effectiveness.
• Prepare and present reports on the status of the program to senior management.

Benefits

• Medical, dental, vision insurance.
• Matching 401(k).
• Paid time off.
• Wellness program.
• Employee discounts for Sony products.
• Bonus package eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Motion Picture and Sound Recording Industries
• Education Level: Bachelor's degree