Data Security Administrator (Hybrid in Syracuse, NY

Role:
The Data Security Administrator is responsible for making sure that Empower FCU’s data security tools effectively identify, classify, label and monitor the sensitive information within the credit union’s network, and that controls designed to protect the data are operating effectively. This Data Security Administrator is a key member of the Information Security team, with a particular focus on understanding and managing data loss prevention (DLP), data exfiltration through various channels, and insider threat mitigation.

The Data Security Administrator will work closely with data owners across the business to identify opportunities to tighten least-privilege access, minimize data replication, and work closely with the Compliance team to support data retention and deletion in alignment with applicable policies and regulations. Additionally, the role serves as subject matter expert in the use of Artificial Intelligence (AI) with respect to data security.

The Data Security Administrator will advise Information Security management and other leadership on the secure use of AI-powered technologies and the risks associated with AI.

Location:

Our headquarters are based in Syracuse, NY. We work in a Hybrid Model requiring a minimum of 5 days in office per month. Pay:
This role pays $86,102.86 to $ annually per year.

• 75% Data Security and Governance:
  • Act as the subject matter expert on data security management and controls through the full data lifecycle, from generation to archiving and deletion.
  • Work in close partnership with the IT and Compliance teams on data governance, classification, data ownership, retention and deletion.
  • Lead the day-to-day operation of Microsoft Purview, including responding to alerts, fine-tuning configuration settings and strengthening policies as both the credit union and the available tools change over time.
  • Assist as needed with eDiscovery and data security investigations.
  • Ensure data security and governance procedures and related documentation remain current and accurate.
  • Assist as necessary with employee training in the credit union’s data security and governance practices.
  • Identify, classify, and inventory sensitive information across systems, repositories, and collaboration platforms to support the credit union's data governance and security objectives.
  • Maintain metrics and reports related to data classification, DLP incidents, risk activity, and overall program effectiveness.
  • Support internal and external audits, reporting, and testing, as they pertain to data security.
• 20% Artificial Intelligence Operations:
  • Act as the subject matter expert for approved artificial intelligence (AI) systems and AI-powered technologies used within the credit union. Advise Information Security management, Project Management and other stakeholders on security when new uses for AI or AI-powered technologies are considered.
  • Maintain appropriate security controls on approved AI systems and enhance controls to detect, alert on and block the use of unapproved AI systems.
  • Monitor emerging AI-related security, privacy, and regulatory risks and recommend appropriate controls, policies, and governance practices.
  • Assist in employee training as necessary, regarding secure AI system usage.
• 5% Cyber Security Incident Response:
  • Assist the Information Security team in cyber security incident handling, particularly as it relates to data security.
  • Seek ways to strengthen data security controls based on lessons learned to avoid similar events in the future.
  • Perform all other duties as assigned.

Performance Measurements:
See Dayforce (HRIS) Performance Management for Goals upon start in role, and annually.

• 3 to 5 years of relevant experience in Data Security, Data Governance, Information Governance, Data Lifecycle Management, Data Loss Prevention (DLP), or related disciplines, preferably in the financial industry (credit union, banks, etc.)
• Highly desirable:
  Experience with Microsoft Purview, Microsoft 365 security technologies, or comparable data protection, governance, and compliance platforms.

• Bachelor's degree in a relevant field (e.g.,…