Data Security Governance Analyst

Job Title: Data Security Governance Analyst
Duration: 6 Months Contract
Location: Jersey City, NJ 07311
Hybrid role - 2 or 3 days onsite/week

Summary:
The Data Security Governance Analyst supports the Insider Risk program by defining, maintaining, and operationalizing governance frameworks, policies, and controls that protect Insider Risk data throughout its lifecycle. The role focuses on policy enforcement, risk alignment, and governance reporting, working closely with Internal Audit, GRC, cybersecurity, data governance, privacy, risk, and technology teams.

Key Responsibilities

1) Insider Risk Governance & Policy
Support the development, maintenance, and implementation of Insider Risk policies, standards, and governance frameworks.
Ensure data security controls align with IR governance requirements and regulatory expectations.
Assist in defining governance requirements for IR internal systems and third party relationships.

2) Cross Functional Coordination
Assist with audit, regulatory, and internal assurance activities related to Insider Risk governance. Work with cybersecurity operations, data governance, privacy, legal, risk, and technology teams to embed data security governance into enterprise processes.

Required Skills & Experience

1) Experience supporting Insider Risk governance, information protection, or cybersecurity programs in a regulated environment.
2) Knowledge of data security principles including data classification, data loss prevention, encryption, and secure data handling.
3) Familiarity with information security governance frameworks and policy lifecycle management.
4) Experience supporting risk assessments, control validation, audit responses, or regulatory reporting related to data security.
5) Understanding of enterprise data environments, identity and access management, and security architecture as they relate to data protection.
6) Ability to work with technical teams to translate policy requirements into operational controls.
7) Strong documentation, reporting, and stakeholder communication skills.
8) Ability to translate complex data security requirements into clear governance guidance and executive ready materials.