Info Security Consultant

KeyBank; Brooklyn (OH); Hybrid; USD 69,000 - 105,000; Full time

Job summary

KeyBank is seeking a skilled Information Security professional to support Data Retention and Protection, eDiscovery, and Insider Risk initiatives within the Information Control and Protection team. You will partner with Legal, Compliance, Risk Management, HR, Corporate Security, Technology, and business stakeholders to safeguard information assets and ensure regulatory compliance.

The ideal candidate has 3–5 years in information security/governance, records management, investigations, or IT,

Qualifications

• Bachelor's degree or equivalent experience.
• 3–5 years of experience in Information Security, Information Governance, Records Management, eDiscovery, Insider Risk, Risk Management, Investigations, or Information Technology.
• Knowledge of information security, records management, risk management, and data governance principles.
• Experience supporting eDiscovery, legal holds, investigative, or compliance activities.
• Strong analytical, problem-solving, and risk assessment skills.
• Excellent written, verbal, and presentation skills.
• Ability to manage multiple priorities and work independently.
• Strong collaboration and stakeholder management skills.
• Experience leading projects, initiatives, or workstreams.

Responsibilities

• Support the development and improvement of Data Retention and Protection program, eDiscovery, and Insider Risk program.
• Develop and maintain policies, standards, procedures, and governance processes.
• Assess risks, identify control gaps, and recommend mitigations.
• Administer records retention schedules, legal holds, and information inventories.
• Conduct eDiscovery activities from data identification to production.
• Support litigation, regulatory, investigative, and audit requests with Legal and Compliance.
• Investigate insider risk events and recommend corrective actions.
• Manage information protection, eDiscovery, and insider risk technologies.
• Manage vendor relationships and support new tools.
• Develop reports, metrics, executive communications.
• Provide consulting to business and technology initiatives.
• Serve as a subject matter expert and build partnerships.

Skills

Analytical skills

Problem solving

Verbal communication

Written communication

Stakeholder management

Project leadership

Multi-tasking

Education

Bachelor's degree or equivalent experience

CISSP/CISM/CRISC certifications

GIAC or Information Governance/Records Management certifications

Job description

Location

4910 Tiedeman Road, Brooklyn Ohio

Hybrid - 2+ days at 4910 Tiedeman Rd. Brooklyn, OH.

Job Summary

Responsible for supporting and advancing Key's Information Control and Protection team responsibilities, including Data Retention and Protection program, eDiscovery/Litigation Support, and Insider Risk Management. This role partners with Legal, Compliance, Risk Management, Human Resources, Corporate Security, Technology, and business stakeholders to protect information assets, ensure regulatory compliance, and mitigate organizational risk.

The ideal candidate has experience in information security, information governance, records management, eDiscovery, insider risk, investigations, or information technology, along with strong analytical, communication, and relationship management skills.

Essential Job Functions

• Support the development, execution, and continuous improvement of Data Retention and Protection program, eDiscovery activities, and Insider Risk program.
• Develop and maintain policies, standards, procedures, and governance processes.
• Assess risks, identify control gaps, and recommend mitigation strategies.
• Administer records retention schedules, legal holds, information inventories, and destruction processes.
• Conduct eDiscovery activities, including data identification, preservation, collection, analysis, and production.
• Support litigation, regulatory, investigative, and audit requests in partnership with Legal and Compliance.
• Investigate potential insider risk events and recommend corrective actions.
• Administer and optimize information protection, eDiscovery, and insider risk technologies.
• Manage vendor relationships and support implementation of new tools and capabilities.
• Develop reports, metrics, presentations, and executive communications.
• Provide consulting support to business and technology initiatives.
• Serve as a subject matter expert and build strong partnerships across stakeholders.

Required Qualifications

• Bachelor's degree or equivalent experience.
• 3-5 years of experience in Information Security, Information Governance, Records Management, eDiscovery, Insider Risk, Risk Management, Investigations, or Information Technology.
• Knowledge of information security, records management, risk management, and data governance principles.
• Experience supporting eDiscovery, legal hold, investigative, or compliance activities.
• Strong analytical, problem-solving, and risk assessment skills.
• Excellent written, verbal, and presentation skills.
• Ability to manage multiple priorities and work independently.
• Strong collaboration and stakeholder management skills.
• Experience leading projects, initiatives, or workstreams.

Preferred Qualifications

• Experience with insider risk, digital investigations, eDiscovery, or litigation support platforms.
• Experience working with Legal, Compliance, Human Resources, Corporate Security, or Risk Management teams.
• Knowledge of data retention, privacy, and regulatory compliance requirements.
• Experience with automation, scripting, or security administration.
• Relevant certifications such as CISSP, CISM, CRISC, GIAC, CEDS, or Information Governance/Records Management certifications.

This position is NOT eligible for employment visa sponsorship for non-U.S. citizens.

COMPENSATION AND BENEFITS

This position is eligible to earn a base salary in the range of $69,000.00 - $105,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

Please click here for a list of benefits for which this position is eligible.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

Job Posting Expiration Date: 10/30/2026

KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing [e-mail].

#LI-Remote