Data Security Specialist II

Take on a key role as a Data Security Specialist where you'll help safeguard enterprise systems and data while driving security, risk, and compliance initiatives. In this position, you'll collaborate with a dedicated cybersecurity team to develop and enforce security policies, proactively identify vulnerabilities, and ensure strict adherence to Payment Card Industry (PCI) standards. You'll be instrumental in managing risk, preparing for audits, and performing technical analyses, all within a dynamic, team-oriented atmosphere.

Required Skills & Experience

• 3-5 years' experience in IT and information security roles (including systems analysis, app development, database administration)
• 3-4 years' experience with information security, risk, and compliance
• Strong hands-on knowledge of PCI compliance (certification a plus)
• Understanding of credit card processing regulations and technology footprints across cloud/servers
• Ability to write and analyze SQL queries for security and audit purposes
• Experience tracking and remediating vulnerabilities with system owners and stakeholders
• Comfort managing large datasets (20K+ assets)
• Experience with industry security tools (CrowdStrike or similar security technology)

Desired Mindset & Skills

• Proactive, results-driven attitude, aiming for spotless compliance reports
• Strong communication, able to facilitate audits and collaborate with internal/external stakeholders
• Experience with evidence review and documentation submission for audits

What You Will Be Doing
Tech Breakdown

• 40% Security policy enforcement, incident response, vulnerability tracking
• 30% PCI compliance audits, evidence review, documentation submission
• 20% Technical analysis, SQL querying, support of in-house security tools
• 10% Stakeholder communication and collaboration

Daily Responsibilities

• Plan, design, and enforce enterprise data security policies and procedures
• Audit and assess compliance with PCI regulations, track issues and coordinate remediation
• Analyze technical configurations, run security queries, and report findings
• Liaise with system owners and facilitate audit meetings
• Review and document evidence for annual attestations and submit for audit review
• Maintain awareness of evolving security technologies and recommend adaptions