| Urgent need : Data Protection/Information Security Analyst at 100% Remote at Remote, Remote, USA |
| Email: [email protected] |
| Hi, Please find job description below; No H1B Job Title:: Data Protection/Information Security Analyst Location:: 100% Remote Area Duration:: 6+ Month Contract MOI:: Phone then 2 step virtual interview process with technical panel Job Description: Data Protection Analyst We are seeking a skilled and experienced Data Protection Analyst to join our team and take ownership of implementing data loss prevention solutions across our health insurance organization. The Data Protection Analyst will be responsible for validating sensitive data, conducting risk assessments, enhancing data loss prevention policies, and implementing robust data loss prevention solutions. The ideal candidate will have a strong background in data protection and a deep understanding of data loss prevention technologies and best practices in the healthcare industry. Responsibilities: Validate Sensitive Data : Identify and validate the types of sensitive data that require protection within the health insurance organization. This may include personally identifiable information (PII), financial data, intellectual property, trade secrets, and other critical data assets. Enhanced Risk Assessment : Utilize data discovery and classification outcomes to conduct comprehensive risk assessments, identifying vulnerabilities and potential risks associated with sensitive data across various systems, applications, and data repositories. Data Loss Prevention Policies Enhancement: Collaborate with cross-functional teams to enhance existing data loss prevention (DLP) policies and procedures, ensuring they align with industry best practices and regulatory requirements. Define guidelines on how sensitive data should be handled, transmitted, and protected within and outside the organization. Data Loss Prevention Solution Implementation: Lead the implementation of a robust data loss prevention solution throughout the organization. Configure and deploy DLP tools to holistically cover all assets, including endpoints, servers, databases, and network communication channels, to prevent accidental or intentional disclosure of sensitive data. Monitor DLP Solution: Continuously monitor and analyze DLP system logs and alerts to identify potential data breaches or policy violations. Investigate and respond to incidents promptly, working with relevant teams to remediate any identified vulnerabilities or incidents. Incident Response and Forensics : Collaborate with incident response teams to investigate data breaches or security incidents related to data loss. Conduct forensic analysis and contribute to incident response plans and strategies to mitigate future risks. Training and Awareness: Develop and deliver training programs to educate employees on data protection best practices, data handling guidelines, and the proper use of data loss prevention tools. Foster a culture of data security awareness and accountability throughout the organization. Compliance and Regulatory Requirements : Stay updated with relevant privacy and data protection regulations, ensuring data loss prevention practices comply with applicable laws, such as CCPA, HIPAA & HITRUST. Conduct periodic audits and assessments to ensure ongoing compliance. Documentation and Reporting: Maintain accurate documentation of data protection processes, procedures, and incident response activities. Generate reports on data loss prevention activities, metrics, and key performance indicators (KPIs) to measure the effectiveness of implemented solutions. Qualifications: Bachelor's degree in Computer Science, Information Security, or a related field. Relevant certifications (e.g., CISSP, CISM, DLP) are highly desirable. Proven experience in implementing and managing data loss prevention solutions within a healthcare or insurance organization. Strong knowledge of data protection principles, regulations, and best practices, particularly in the healthcare industry (e.g., HIPAA, HITECH). Familiarity with data classification methodologies and tools for identifying sensitive data. Experience in conducting risk assessments, vulnerability assessments, and penetration testing. Proficiency in deploying and configuring data loss prevention tools and technologies, such as DLP software suites, network traffic monitoring tools, and encryption solutions. Knowledge of incident response and forensic investigation processes related to data loss incidents. Excellent analytical and problem-solving skills, with the ability to analyze complex data protection issues and recommend effective solutions. Strong communication and interpersonal skills, with the ability to collaborate with stakeholders at all levels of the organization. Detail-oriented mindset with a focus on maintaining accurate documentation and generating comprehensive reports. Ability to adapt to changing security threats and regulatory requirements and make proactive adjustments to data protection measures. Key Areas of Experience: Azure information protection Data discovery Data classification Data labeling Data tokenization Data encryption Additional Notes: The data protection specialist we are looking for should have an experience of handling sensitive data (PHI, PII and PCI). This involves classifying, labeling and tokenizing the sensitive information residing in Storage accounts, data lake, data factory and analytics solution. In addition to this the candidate must have hands on experience with Azure Information Protection platform to handle data across O365. Regards, Vijay Kumar | Lead Recruiter Trail Blazer Consulting LLC | Astoria, NY 11105 Office: 914-650-4600 Ext: 148 Keywords: New York |
| [email protected] View all |
| Thu Oct 05 21:57:00 UTC 2023 |