Data Lead: Analytics, Governance & Security

xScion; McLean (VA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k) match

Flexible spending

Up to 27 days off

Remote work opportunities

Parental leave

Wellness benefits

Job summary

xScion is looking for a Data Lead: Analytics, Governance & Security to join our project team in McLean, Virginia. The candidate will manage analytics enablement, governance framework, and security for sensitive benefits and health data, ensuring compliance with HIPAA and other regulations.

The ideal applicant will have over 7 years of experience in data governance, familiarity with data access tools, and the ability to produce compliance documentation. We offer comprehensive benefits, including remote work opportunities and wellness benefits.

Qualifications

• 7+ years in data governance, compliance, or information management with direct responsibility.
• Deep working knowledge of HIPAA Privacy and Security Rules applicable to health data.
• Experience with RBAC/ABAC and fine-grained security controls for cloud platforms.

Responsibilities

• Define reporting and analytics use cases and mapping to requirements.
• Establish Data Hub governance framework aligned with policies.
• Produce audit-ready evaluation reports summarizing compliance posture.

Skills

Data governance

Compliance management

HIPAA Privacy and Security compliance

Data classification

RBAC/ABAC design

Audit-ready documentation

Education

Bachelor's degree in Computer Science, Information Systems, or equivalent

Tools

Unity Catalog

AWS Glue Data Catalog

Collibra

Alation

Job description

xScion is seeking a Data Lead: Analytics, Governance & Security to work on an xScion project team with one of our clients. This candidate leads analytics enablement, the governance framework, and the security model for the Data Hub. The role ensures highly sensitive benefits and health data is governed, protected, and usable for OEB's priority reporting and compliance use cases – focusing on HIPAA, privacy, retention, and audit readiness.

As a Data Lead, You Will:

• Define priority reporting and analytics use cases (360 participant view, pension calculations, compliance analytics, inactive population communications) and map them to data, security, and tooling requirements
• Establish the Data Hub governance framework: data classification, stewardship roles, approval workflows, retention rules, and incident/breach support aligned with OEB and Federal Reserve policies
• Map regulatory obligations (HIPAA, applicable state benefits laws) to concrete controls, policies, monitoring processes, and evidence expectations within the Data Hub operating model
• Recommend and oversee cataloging, lineage, and access-control approaches (Unity Catalog, AWS Glue Data Catalog, RBAC/ABAC) to support discoverability, traceability, and least‑privilege access
• Define fine‑grained security patterns: RBAC/ABAC, encryption, key management, logging, and monitoring for highly sensitive data
• Produce audit‑ready evaluation reports summarizing compliance posture, risks, mitigations, and supporting evidence for internal audits and external reviews
• Partner with Architecture/Ingestion lead and IV&V lead to ensure governance and security requirements are built into ingestion patterns, data models, and testing from the outset.

To Be Successful, You Need:

• Permanent Residency or US Citizenship
• Bachelor's degree in Computer Science, Information Systems, Business IT Management or equivalent practical experience
• 7+ years in data governance, compliance, or information management with direct responsibility for governance framework delivery
• Deep working knowledge of HIPAA Privacy and Security Rules as applied to health and benefits data
• Experience building data governance frameworks: classification, stewardship, approval workflows, and retention policy
• Familiarity with cataloging and access‑control tooling – Unity Catalog, AWS Glue Data Catalog, Collibra, Alation, or equivalent
• Experience with RBAC/ABAC design and fine‑grained security controls for cloud data platforms
• Ability to produce audit‑ready compliance documentation: posture assessments, risk/mitigation evidence packages
• Experience mapping regulatory obligations (HIPAA, state‑level benefits law) to data platform controls and monitoring.

Nice to Have:

• Prior work in Federal Reserve, OCC, FDIC, or other financial regulatory environments
• Experience with Databricks Unity Catalog or AWS Lake Formation for fine‑grained access control
• CIPP, CIPM, CISSP, or equivalent privacy/security certification
• Background in defined benefit or defined contribution plan compliance.

Benefits

• Medical, dental, 401(k) match, flexible spending and more; up to 27 days off a year (including your birthday!), remote work opportunities, parental leave, wellness benefits and many other items that inspire balance and flexibility.

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status. xScion takes affirmative action in support of its policy to employ and advance in employment individuals who are minorities, women, protected veterans and individuals with disabilities.