Systems Cyber Specialist - Cyber Governance and Information Protection

Overview

The Systems Cyber Specialist, under the general guidance of the Systems Manager or Project Manager, is responsible for managing large-scale projects and initiatives, and for providing technical support for existing cyber security tools within Information Security. This role includes overseeing, mentoring, and coordinating the work of a team of analysts who support ongoing IT and cybersecurity projects, while serving as a team leader by setting priorities, assigning tasks, monitoring performance, and providing technical direction and guidance. The Systems Cyber Specialist fosters collaboration, ensures adherence to best practices and standards, supports professional development of team members, and acts as an escalation point for complex technical and operational issues. The role leads and assumes responsibility for data security and governance. This includes implementing and enforcing data protection standards, data classification, access controls, and governance frameworks to ensure confidentiality, integrity, availability, and regulatory compliance of enterprise data. Additionally, the position is responsible for day-to-day cybersecurity administrative tasks, problem-solving, issue resolution, stakeholder communication, and the continuous improvement of cybersecurity, team effectiveness, and data governance practices.

Responsibilities

• Oversee responsibilities related to identifying, classifying, and protecting sensitive data throughout the organization.
• Ensure thorough coverage and accountability for all aspects of enterprise data security.
• Lead enterprise-wide sensitive data discovery efforts across varied repositories, including both structured and unstructured.
• Responsible for defining and maintaining a comprehensive data classification taxonomy.
• Enforce a least privileged access model across enterprise data stores.
• Serves as a people manager with responsibility for hiring, coaching, work assignment, performance management, and ongoing development of a team supporting critical IT and cybersecurity initiatives.
• Design, implement, and manage Data Loss Prevention (DLP) policies using tools such as Microsoft Purview.
• Establish and maintain a data security risk register aligned with enterprise requirements.
• Define and track key performance indicators (KPIs) and key risk indicators (KRIs); develop executive dashboards and board-level reporting for metrics and executive communications.
• Drive data security awareness and behavior change programs across the organization.
• Demonstrate leadership qualities and responsibilities relevant to core-to-edge enterprise data security initiatives.

Qualifications

• Master's Degree Information Technology,
• Computer Science, Math,
• Engineering or business
• related disciplines. and a minimum of three (3)
• years' full-time of
• relevant experience IT or Information Security or
• Bachelor's Degree Computer Science,
• Computer Engineering, or
• Information Security and a minimum of four (4)
• years' full-time relevant
• experience IT or Information Security or
• Associate's Degree Computer Science,
• Computer Engineering, or
• Information Security and a minimum of five (5)
• years' full-time
• relevant experience IT or Information Security

• Master's Degree Information Technology,
• Computer Science, Math,
• Engineering or business
• related disciplines. and a minimum of three (3)
• years' full-time of
• relevant experience With certifications in CISSP, CISM, CIPP are
• preferred.
• Three (3) years' full-time work experience
• in Information Security;
• Computer Incident Response Team (CIRT),
• Cyber Security Operation Center (CSOC), or
• Incident Management experience is
• preferred.

• 3-5 years experience in designing, developing, implementing secure architectures and/or processes, required.
• Thorough understanding of security standards and strong understanding of cyber security principles, required.
• Experience in evaluating technology and establishing standard designs, required.
• Experience with implementing or integrating commercially available cybersecurity components, required.
• Experience in cybersecurity best practices, security tools, required.
• Experience in implementing continuous monitoring and detection capabilities to identify anomalous or unauthorized activity in enterprise data space, required.
• Ability to handle multiple assignments with changing priorities while meeting deadlines, required.
• Must be flexible and able to work off-hours as required to support deployments, resolve production problems or respond to corporate emergencies, required.
• Excellent oral and written communication. Must be comfortable and skilled at selling information security processes and techniques. Must be able to communicate designs and give persuasive presentations. Must be able to interact with all levels of management and communicate technical concepts to a non-technical audience, required.
• Experience in integrating data security controls with governance and risk frameworks to provide measurable reduction in data exposure and improved compliance posture, required.
• Experience in leading enterprise wide sensitive data discovery across structured and unstructured environments, eliminating blind spots and uncovering high-risk data exposure, preferred.
• Vulnerability, Threat, Risk management and/or, Compliance experience, preferred.
• Experience with data classification tools such as Varonis or similar, preferred.
• Ability to establish medium and long-term plans and priorities and estimate
• investment requirements skills, preferred.

• Ability to lead/manage others
• Builds and manages effective teams
• Effectively coaches and delivers constructive feedback
• Excellent collaboration and team building skills
• Excellent collaboration and team building skills
• Project Demonstrated project management skills

• Driver's License

• Sit or stand to answer a phone for the duration of the workday
• Sit or stand to use a keyboard, mouse, and computer for the duration of the workday
• Ability to read small print and symbols

• The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.
• The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.