Data Governance (Privacy and Security) Specialist

Role overview

Privacy and compliance

• Monitor compliance with organizational policies, legal requirements, regulations, and contractual obligations.
• Conduct privacy impact assessments, evaluate data-processing risks, recommend corrective measures, and review departmental data-use practices.
• Monitor regulatory changes and recommend updates to governance programs and policies.

Information security and data protection

• Implement and manage security controls for sensitive and confidential data, including PHI and PII.
• Support identity and access management, secure data handling, and integration of protection requirements into operational processes.
• Monitor DLP compliance, coordinate remediation, and collaborate with technical teams to maintain secure databases and data environments.

Data governance and risk

• Establish governance frameworks, standards, policies, procedures, data-entry rules, and management best practices.
• Support enterprise data discovery, mapping, classification, and data quality controls; develop database management plans for large-scale analysis projects.
• Conduct audits and risk assessments, evaluate protection frameworks, support incident response, and prepare reports and recommendations.

Collaboration and training

• Collaborate with business, operations, legal, compliance, and technical teams; provide expert guidance on privacy, governance, and compliance.
• Develop and deliver privacy, security, and compliance training and promote data-protection awareness.
• Support vendor reviews and third-party data-protection assessments; perform related duties and special projects.

Qualifications and experience

• Bachelor's degree in Computer Science, Information Security, Information Management, Cybersecurity, or a related field.
• 8–12 years of experience in data privacy, data protection, information security, governance and compliance, cybersecurity frameworks, and regulatory compliance.
• Experience in regulated industries; healthcare experience is preferred.
• Strong knowledge of privacy and protection laws, security frameworks, data governance, and risk management and compliance practices.

Technical knowledge and skills

• Knowledge of ISO 27001, ISO 27701, NIST, and CIS Benchmarks.
• Experience with cloud environments, identity and access management, data discovery and classification tools, privacy management solutions, and unified data governance platforms.
• Strong analytical, problem-solving, communication, stakeholder management, reporting, auditing, and documentation skills.
• Ability to develop policies, governance frameworks, and compliance programs and deliver training and awareness initiatives.

Preferred training and certifications

• Additional professional training or certifications in data privacy, governance, or information security is preferred.
• CIPP, CDPSE, or equivalent privacy, governance, or cybersecurity certifications are preferred.