Support organization-wide data classification programs tailored for international and government contexts.
Implement and maintain classification-driven security controls in data warehouses (Snowflake, Redshift, BigQuery, Databricks, Azure Synapse, Microsoft Fabric or on-prem solutions).
Manage data sovereignty, localization requirements, and cross-border transfer mechanisms (Standard Contractual Clauses, Binding Corporate Rules, adequacy decisions).
Support FedRAMP, FISMA, NIST 800-53, CMMC, ITAR, or equivalent government frameworks.
Secure data ingestion, transformation, and movement processes with classification-aware controls.
Enforce strict access controls based on data classification, user clearance levels, and need-to-know principles.
Support risk assessments, vulnerability scans, and penetration testing focused on international data flows and government environments.
Support security incident investigations involving data warehouses, ensuring proper handling per government and international breach notification requirements.
Partner with data engineering, compliance, legal, and government stakeholders to embed security and classification into data architecture and pipelines.

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field
Typically, five (5) years of experience in data security, with specific experience in international (multi-jurisdictional) and/or government / public sector environments
Hands-on experience with major cloud and on-premise data platforms in secure environments
Experience implementing encryption, key management, DLP, and secure data exchange protocols
US Citizenship is required.
Security certifications: CISSP, CISM, CCSP, CRISC, CDPSE, or government-specific (e.g., Security+, CAP).
Cloud certifications: AWS Certified Security, Azure Security Engineer, Google Cloud Professional Security Engineer (Government Cloud experience highly valued).
Familiarity with data governance platforms (Microsoft Purview, Collibra, Alation) and automated classification tools.
Experience with hybrid/multi-cloud architectures and secure government cloud environments (AWS GovCloud, Azure Government, etc.).
Scripting skills (Python, SQL, PowerShell) for automation of classification, monitoring, and compliance reporting.
Strong ability to translate complex regulatory requirements into practical technical controls.

Data Security Analyst

Key skills