Responsibilities

What will you contribute?

As a Data Security and Privacy Engineer, you will be part of the Information Security team, reporting to the Chief Data Security Architect. Your role involves governing and protecting Finastra's product and customer data. You will collaborate with Security, Legal, Product Development, Data Engineering, and other teams to classify data and ensure compliance with confidentiality, integrity, availability, and data privacy requirements. You will also enhance the data governance framework, policies, processes, and standards, and handle tasks such as data classification, asset registration, enterprise data security, product risk assessments, and risk remediation. Additionally, you will develop process automation solutions for repeatable tasks.

• Complete data governance tasks and maintain due diligence records, ensuring compliance with policies, standards, and regulations.
• Conduct data classification reviews, identify data minimization opportunities, prescribe de-identification methods, and track risk remediation.
• Review asset metadata records for anomalies and guide asset owners on corrections.
• Coordinate with stakeholders to achieve data governance framework goals, including data ownership, stewardship, dictionaries, flow diagrams, handling methods, usage rights, metadata management, and regulatory compliance.
• Conduct training and awareness on data governance and protection standards and procedures.
• Develop metrics and reports for continued compliance with the data governance framework and company standards.
• Assist with requirements, implementation, integration, and training for new data security tools, standards, and processes.
• Independently carry out assignments, coordinate work with others, and keep team members informed of project statuses and risks.

• Bachelor's or advanced degree in Information Technology or related field
• 3+ years of professional experience in Data Governance, Data Security, or a similar role.
• Strong organizational skills and motivation for self-improvement and achieving results.
• Excellent verbal and written communication skills, with the ability to effectively communicate with technical personnel, business stakeholders, and management.
• Understanding of key data governance concepts and data management practices.
• Familiarity with common data privacy concepts and compliance methodologies.
• Ability to make independent judgments and accurately identify risks.
• Familiarity with API calls, SQL queries and practical scripting/coding experience (e.g., Python, PowerShell).

• Certification as a Certified Data Management Professional (CDMP), Certified Information Privacy Technologist (CIPT), or other Security certification (CISSP, CCSP, CISA).
• Experience with JIRA, ServiceNow, Power BI, and data management software.
• Exposure to cloud-native application hosting, containers, and APIs.