Hybrid Data Security Architect: Enterprise Protection Leader

SMBC Group; Charlotte, Northern (NC, KY); Hybrid; USD 140.000 - 210.000; Vollzeit

Zusammenfassung

SMBC Group is seeking a Senior Data Security Architect to lead enterprise data security across structured and unstructured data. You will partner with business, technology, security, governance, privacy, risk, and engineering teams to translate security strategy into practical architectures, standards, and control requirements.

The role focuses on data protection, encryption, key management, and secure data sharing across on-premises, cloud, SaaS, and hybrid environments, while aligning with

Qualifikationen

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, Engineering, or related field. Equivalent experience will be considered.
• 8+ years of experience in cybersecurity, information protection, data security, or security architecture roles.
• 5+ years of experience designing and implementing enterprise-scale data protection and data security solutions.
• Strong expertise in data security architecture, information protection, data loss prevention, and sensitive data protection programs.
• Deep knowledge of data classification, data discovery, labeling, data lifecycle management, and data governance principles.
• Strong understanding of encryption technologies, key management systems, certificate management, tokenization, and cryptographic controls.
• Experience securing structured and unstructured data across on-premises, cloud, SaaS, and hybrid environments.
• Demonstrated expertise in cloud security, cloud-native data platforms, and modern analytics architectures.
• Experience with insider risk management, data monitoring, and data exfiltration prevention initiatives.
• Knowledge of AI/ML, analytics, and emerging technology security risks and corresponding protection controls.
• Strong understanding of identity and access management concepts as they relate to data security.
• Experience with Microsoft Purview Information Protection, Data Loss Prevention, Insider Risk Management, and Data Governance capabilities.
• Experience with Microsoft Defender, Microsoft Security solutions, and Microsoft cloud security technologies.
• Familiarity with DSPM, data discovery, and data governance platforms.
• Experience securing enterprise data platforms such as Databricks and cloud-native analytics environments.
• Experience with SaaS security, CASB, cloud security posture management, and data protection technologies.
• Familiarity with enterprise encryption, key management, and certificate management solutions.
• Experience with AI governance, AI security controls, and AI data protection capabilities.
• Demonstrated experience developing security architectures, standards, policies, and technical requirements.
• Experience in financial services or another highly regulated industry.

Aufgaben

• Design and govern enterprise data protection controls, including data discovery, classification, labeling, encryption, tokenization, masking, rights management, and secure data sharing.
• Define security architectures and requirements to protect sensitive data at rest, in transit, and in use across on-premises, cloud, SaaS, and hybrid environments.
• Lead the architecture and governance of Data Loss Prevention (DLP) and Insider Risk capabilities across email, endpoint, cloud, web, collaboration, and AI platforms.
• Establish policies, detection capabilities, and monitoring controls to prevent unauthorized access, disclosure, misuse, or exfiltration of sensitive information.
• Define and govern data security architectures for cloud platforms, data lakes, data warehouses, analytics platforms, AI/ML solutions, and modern data engineering environments.
• Establish security requirements for data sharing, AI model development, data products, and emerging technologies while ensuring alignment with enterprise security standards.
• Define enterprise standards and architectural requirements for encryption, cryptography, key management, secrets management, certificate management, and data protection technologies.
• Partner with Infrastructure, Cloud Engineering, and Application teams to ensure cryptographic controls and key management practices are effectively implemented and governed across the enterprise.
• Partner with Data Governance, Privacy, Legal, Compliance, and Risk teams to integrate security requirements into enterprise governance, classification, retention, and regulatory compliance processes.
• Conduct security architecture reviews for applications, cloud services, data platforms, and strategic technology initiatives, identifying risks and recommending appropriate mitigations.
• Serve as a trusted advisor to business, technology, and engineering teams, providing guidance on secure-by-design solutions, security best practices, and emerging data protection capabilities.
• Support regulatory examinations, audits, risk assessments, and the development of security policies, standards, procedures, and control frameworks.

Kenntnisse

Data security

Security architecture

Cloud security

DLP

Insider risk

Data governance

Encryption

IAM concepts

AI/ML security

Regulatory compliance

Ausbildung

Bachelor's degree in Information Security or related field

Tools

Microsoft Purview

Microsoft Defender

Databricks

Purview Information Protection

Data Loss Prevention tools

Certificate management tools

Jobbeschreibung

SMBC Group is seeking a Senior Data Security Architect to lead enterprise data security across structured and unstructured data. You will partner with business, technology, security, governance, privacy, risk, and engineering teams to translate security strategy into practical architectures, standards, and control requirements.

The role focuses on data protection, encryption, key management, and secure data sharing across on-premises, cloud, SaaS, and hybrid environments, while aligning with