Data Protection - Senior Lead, Data Discovery & Remediation

Tasks

• Responsible for business processes and improving a framework by ensuring compliance with customer requirements, with a focus on ensuring the most efficient and secure process.
• Management of the system's day-to-day operations, including planning, monitoring, controlling, and reporting on performance and output.
• Leading a team of analysts and engineers responsible for the development, support, and operation of the system.
• Develop a deep understanding of the underlying data model and technologies.
• Collaborating with our suppliers to ensure that the system is well-designed and properly implemented.
• Resolution of data remediation/discovery issues. Identifying process flows that optimize the workflow for identifying and correcting errors, and ensuring that these errors do not recur.
• Conducting remediation reviews to identify and mitigate application and information risks using threat modeling methodologies (e.g., STRIDE).
• Development and implementation of remediation plans using regular expressions, etc.
• Remediation of hunting qualification domains (such as CIMIS, Cloud, AWS/GCP Certified Security, or similar).
• Hands-on experience with dynamic exploit validation, exploit validation, and mastering privileged knowledge, as well as how security vulnerabilities are exploited in real time.
• Business and risk reporting, as well as compliance capabilities such as vulnerability management and remediation testing.
• Comprehensive security project design (such as the NIST Cyber Resilience Framework), risk management, and risk treatment (including prioritization, security design, migration, development, resilience, reliability, and response).
• Proficiency in the use and operation of security tools such as Tableau, data sources, Azure tools, and code or process automation using Python, Ruby, Node.js, and/or AWS.
• Data security discovery: advanced data modeling, business data analysis, data model creation, and process automation. Ability to influence decision-making by identifying and leveraging specific use cases, such as vulnerabilities.
• Proactive collaboration and maintaining effective relationships with others.
• Pragmatism and effectiveness in business and work relationships, as well as comfort in the workplace.
• Ability to collaborate and successfully maintain data that is consistent, easily accessible, and understandable.
• Skills in data processing, visualization, and analytics.
• Working effectively with small teams, process tools, and projects.

Requirements

• Experience in data discovery and data remediation (5+ years) is required.
• Excellent communication, conflict resolution, and stakeholder management skills.
• Experience in proactively and reactively addressing data discovery and protection issues.
• Ability to collaborate with suppliers on a global scale as needed, often during U.S. business hours.
• Ability to build and manage relationships with high-level stakeholders in a hybrid environment.
• Knowledge of current GDPR, CCPA, and data protection regulations, and the ability to develop strategies and controls in accordance with them.
• Expertise in data discovery and data matching.
• Applicants must be authorized to work at the location for the duration of the employment at the time of application. Please note that Northern Trust cannot provide assistance with work permits for this role. This includes Global Business Development (a service of Northern Trust, a member of the EY Alliance) and Northern Trust Inc., which are affiliated entities.