Our client is seeking a Data Security Specialist with 10-15 years of experience to conduct quality control assessments of data security controls across cloud and on-premise environments. This role focuses on evaluating control effectiveness, identifying gaps, ensuring regulatory compliance, and supporting the organization's overall data security posture.
Responsibilities & Qualifications
- Conduct regular quality control assessments of data security controls across cloud and on-premise platforms, evaluating their effectiveness in protecting sensitive data
- Identify gaps and weaknesses in security controls, recommend corrective actions, and track remediation efforts
- Verify that implemented security controls comply with organizational policies, business requirements, and regulatory standards
- Collaborate with platform owners and technical teams to ensure proper configuration, maintenance, and monitoring of security controls
- Document findings from quality control reviews, develop checklists and procedures, and provide feedback and training on data security best practices
- Support audit processes by providing evidence of quality control oversight and reporting metrics, outcomes, and identified risks to management
- Stay informed about emerging threats, vulnerabilities, and platform updates to ensure ongoing effectiveness and compliance of security controls
Requirements
- 10-15 years of experience in data security or related cybersecurity roles
- Advanced expertise in data security controls, cloud security, and on-premise security architectures
- Hands-on experience with security tools and technologies including SIEM, DLP, CASB, and DSPM solutions
- Strong knowledge of risk assessment, mitigation strategies, and regulatory compliance frameworks
- Demonstrated ability in quality control assessments, problem-solving, and identifying control weaknesses
- Excellent communication and collaboration skills to work effectively with technical teams and stakeholders
- Ability to document processes clearly, track remediation efforts, and communicate security findings to management