Job Description

Our client is seeking a Data Security Specialist with 10-15 years of experience to conduct quality control assessments of data security controls across cloud and on-premise environments. This role focuses on evaluating control effectiveness, identifying gaps, ensuring regulatory compliance, and supporting the organization's overall data security posture.

Responsibilities & Qualifications

• Conduct regular quality control assessments of data security controls across cloud and on-premise platforms, evaluating their effectiveness in protecting sensitive data
• Identify gaps and weaknesses in security controls, recommend corrective actions, and track remediation efforts
• Verify that implemented security controls comply with organizational policies, business requirements, and regulatory standards
• Collaborate with platform owners and technical teams to ensure proper configuration, maintenance, and monitoring of security controls
• Document findings from quality control reviews, develop checklists and procedures, and provide feedback and training on data security best practices
• Support audit processes by providing evidence of quality control oversight and reporting metrics, outcomes, and identified risks to management
• Stay informed about emerging threats, vulnerabilities, and platform updates to ensure ongoing effectiveness and compliance of security controls

Requirements

• 10-15 years of experience in data security or related cybersecurity roles
• Advanced expertise in data security controls, cloud security, and on-premise security architectures
• Hands-on experience with security tools and technologies including SIEM, DLP, CASB, and DSPM solutions
• Strong knowledge of risk assessment, mitigation strategies, and regulatory compliance frameworks
• Demonstrated ability in quality control assessments, problem-solving, and identifying control weaknesses
• Excellent communication and collaboration skills to work effectively with technical teams and stakeholders
• Ability to document processes clearly, track remediation efforts, and communicate security findings to management