Data Security Administrator

Role: The Data Security Administrator is responsible for making sure that Empower FCU’s data security tools effectively identify, classify, label and monitor the sensitive information within the credit union’s network, and that controls designed to protect the data are operating effectively. This Data Security Administrator is a key member of the Information Security team, with a particular focus on understanding and managing data loss prevention (DLP), data exfiltration through various channels, and insider threat mitigation. The Data Security Administrator will work closely with data owners across the business to identify opportunities to tighten least-privilege access, minimize data replication, and work closely with the Compliance team to support data retention and deletion in alignment with applicable policies and regulations. Additionally, the role serves as subject matter expert in the use of Artificial Intelligence (AI) with respect to data security. The Data Security Administrator will advise Information Security management and other leadership on the secure use of AI-powered technologies and the risks associated with AI.Location: Our headquarters are based in Syracuse, NY. We work in a Hybrid Model requiring a minimum of 5 days in office per month. Pay: This role pays $86,102.8560 to $129,154.2840 annually per year.  Essential Functions & Responsibilities: 75%   Data Security and Governance:- Act as the subject matter expert on data security management and controls through the full data lifecycle, from generation to archiving and deletion.- Work in close partnership with the IT and Compliance teams on data governance, classification, data ownership, retention and deletion.- Lead the day-to-day operation of Microsoft Purview, including responding to alerts, fine-tuning configuration settings and strengthening policies as both the credit union and the available tools change over time.- Assist as needed with eDiscovery and data security investigations.- Ensure data security and governance procedures and related documentation remain current and accurate.- Assist as necessary with employee training in the credit union’s data security and governance practices.- Identify, classify, and inventory sensitive information across systems, repositories, and collaboration platforms to support the credit union's data governance and security objectives.- Maintain metrics and reports related to data classification, DLP incidents, risk activity, and overall program effectiveness.- Support internal and external audits, reporting, and testing, as they pertain to data security. 20%   Artificial Intelligence Operations:- Act as the subject matter expert for approved artificial intelligence (AI) systems and AI-powered technologies used within the credit union. Advise Information Security management, Project Management and other stakeholders on security when new uses for AI or AI-powered technologies are considered.- Maintain appropriate security controls on approved AI systems and enhance controls to detect, alert on and block the use of unapproved AI systems.- Monitor emerging AI-related security, privacy, and regulatory risks and recommend appropriate controls, policies, and governance practices.- Assist in employee training as necessary, regarding secure AI system usage. 5%   Cyber Security Incident Response:- Assist the Information Security team in cyber security incident handling, particularly as it relates to data security.- Seek ways to strengthen data security controls based on lessons learned to avoid similar events in the future.- Perform all other duties as assigned. Performance Measurements: See Dayforce (HRIS) Performance Management for Goals upon start in role, and annually. Knowledge and Skills: Experience: 3 to 5 years of relevant experience in Data Security, Data Governance, Information Governance, Data Lifecycle Management, Data Loss Prevention (DLP), or related disciplines, preferably in the financial industry (credit union, banks, etc.)Highly desirable: Experience with Microsoft Purview, Microsoft 365 security technologies, or comparable data protection, governance, and compliance platforms. Education: Bachelor's degree in a relevant field (e.g., Information Security, Risk Management, Data Science).Alternatively, candidates may qualify through a combination of relevant certifications or specialized training in in related technologies or disciplines along with job-specific experience. Interpersonal Skills: This position requires the ability to build effective working relationships across technology, compliance, legal, and business functions. The successful candidate must be able to communicate technical concepts to non-technical audiences, influence decision-making without direct authority, exercise sound judgment when handling sensitive information, and collaborate effectively on cross-functional initiatives. Other Skills: -Strong knowledge of data security, data governance, privacy, and information lifecycle management principles.-Experience administering Microsoft Purview, Microsoft 365 security technologies, or comparable data protection platforms.-Ability to analyze security events, identify trends, and recommend practical risk mitigation strategies.-Strong written and verbal communication skills, including the ability to present recommendations to technical and non-technical stakeholders.-Demonstrated project management and organizational skills, with the ability to manage competing priorities.-Ability to exercise discretion and maintain confidentiality when handling sensitive business and member information.-Continuous learning mindset with the ability to adapt to evolving technologies, regulatory requirements, and cybersecurity threats.-Availability to participate in security investigations and incident response activities as needed.-Ability to communicate positively with diverse populations and foster an inclusive culture. Physical Requirements: - Prolonged periods of sitting at a desk and working on a computer.- Regular use of hands and fingers to operate a computer, keyboard, and telephone.- Near visual acuity required for working with digital content.- Occasional light lifting of office supplies or equipment may be necessary (up to 20 pounds).- Ability to travel occasionally between credit union locations for meetings, training, or technology-related projects.- Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. Work Environment:  - Hybrid work model requiring a minimum of 5 days per month in-office at the Syracuse, NY headquarters.- Standard office environment with moderate noise levels.- Regular collaboration with colleagues via Microsoft Teams, email, and in-person meetings.- Occasional travel to credit union locations for meetings, training, technology initiatives, or security-related projects.