Senior Data Protection Analyst

Hudson Valley Credit Union; City of Poughkeepsie (NY); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Base & Variable Pay Structures

Paid Personal, Holiday & VolunteerTime

Professional Development & Training

Student Loan Repayment & Tuition Reimb

Medical, Dental & Vision Coverage

401(k) With Employer Match & Non-Elect

Life, Short-term & Long-term Insurance

Discounted Loan Rates & Fees

Job summary

Hudson Valley Credit Union is seeking a Senior Data Protection Analyst to support the CISO by aligning data governance with data protection controls across the credit union’s data estate, including classification, encryption, retention, and access management.

This role partners with Information Security, IT, Data Governance, and business units to embed data protection requirements in governance policies and ensure governance decisions are informed by security risk across Databricks/Unity Catalog

Qualifications

• Bachelor's degree in information systems, cybersecurity, or a related field.
• CISSP, CompTIA Security+, SSCP, CISA, CDMP or equivalent data protection or security certification preferred.
• Minimum 5 years work history in data security, governance, or information risk management.
• Minimum 1 year work history in a financial institution or other regulated environment preferred.

Responsibilities

• Evaluate and test data protection controls across databases, data warehouses, and the Databricks platform.
• Assess logical access controls and RBAC configurations to ensure least- privilege alignment.
• Review new technologies and vendors for data security posture against governance standards.
• Contribute security findings to governance policy development and procedures.
• Collaborate to embed data protection requirements in governance policies, standards, and procedures.
• Support data classification framework and consistent handling of sensitive data.
• Provide security input to Data Governance Committee on access governance and risk.
• Remediate issues impacting data integrity or confidentiality with Data Stewards and IT Security.
• Map data protection controls to regulatory requirements (GLBA, FFIEC, NCUA 748, NIST, NYDFS 500).
• Assist in audit/regulatory examinations with documentation of controls and remediation actions.
• Promote privacy by design in data workflows and applications.

Skills

Data security

Governance

Risk management

Education

Bachelor's degree in Information Systems, Cybersecurity, or related field

Job description

Overview

Hudson Valley Credit Union is currently recruiting for the position of Senior Data Protection Analyst. Primary Function: Support the CISO in ensuring that data governance policies and data protection controls are aligned, effective, and consistently applied across the credit union's data estate. This role bridges data governance and cybersecurity by assessing controls for data classification, access, encryption, and retention. Evaluate data protection risks, support regulatory compliance (GLBA, FFIEC, NCUA Part 748, NIST, NYDFS Part 500), and ensure that governance and security controls work together to safeguard member and institutional data. Partner with Information Security, IT, Data Governance, and business units to align security practices with the credit union's Information Security and Data Governance Programs. Serve as the primary coordination point between the Data Governance program and the Cybersecurity team, ensuring that data protection requirements are embedded in governance policies and that governance decisions are informed by security risk.

Responsibilities

• Evaluate and test data protection controls including encryption, masking, data loss prevention (DLP), access management, and file transfer security across databases, data warehouses, and the Databricks platform
• Assess logical access controls and role-based access configurations to ensure alignment with governance policies and least-privilege principles.
• Participate in reviews of new technologies and vendors to assess data security posture with governance standards.
• Contribute security findings and recommendations to governance policy development.
• Collaborate with the Data Governance Lead to ensure data protection requirements are embedded in governance policies, standards, and procedures.
• Support the data classification framework by ensuring consistent tagging and handling of sensitive data aligns with both governance definitions and security controls.
• Provide security input to the Data Governance Committee on access governance, data protection risks, and control effectiveness.
• Partner with Data Stewards, Data Quality Analysts, and IT Security to remediate issues that impact data integrity or confidentiality.
• Maintain awareness of regulatory requirements (GLBA, NCUA, CFPB, FFIEC, NIST) and assist in mapping data protection controls to those requirements.
• Support audit and regulatory examinations by providing documentation of data security controls, evidence of access reviews, and remediation actions
• Support the implementation of privacy and security-by-design principles within data workflows and business applications.
• Participate in data-related risk assessments and contribute to security incident investigations involving data exposure, unauthorized access, or policy violations. Assist in developing and maintaining procedures for secure data handling, retention, and disposal aligned with the data governance retention framework. Contribute data protection metrics to data governance dashboards and reporting.
• Support awareness efforts that promote secure data practices across departments, reinforcing governance policies with practical security guidance. Work cross-functionally with Data Governance, IT, and business units to ensure security controls keep pace with platform changes, including the Databricks/Unity Catalog environment.
• Adhere to all Credit Union policies, procedures, and regulatory agency requirements. Participate in all required and recommended training and development including, but not limited to, Bank Secrecy Act training (BSA) and demonstrate attained knowledge. Participate on Credit Union teams, projects and strategic initiatives when the opportunity arises. Perform additional duties and special projects as assigned.
• Embrace and apply HVCU's guiding principles to all activities and responsibilities. This includes the Credit Union's Mission, Vision, Core Values, Employee and Member Value Propositions, Sales and Service Model, and commitment to Lean Six Sigma practices. Support the Credit Union's initiatives by demonstrating teamwork and professionalism.
• Responsible for regular and predictable attendance including punctuality.

Qualifications

• Bachelor's Degree in Information Systems, Cybersecurity, or related field required.
• CISSP, CompTIA Security+, SSCP, CISA, CDMP, or equivalent data protection or security certification preferred.
• Minimum 5 years Work history in data security, governance, or information risk management field required.
• Minimum 1 years Work history in a financial institution or other regulated environment preferred.

Why Choose HVCU?

Join a team where your growth matters. At Hudson Valley Credit Union, we offer a supportive, community-focused culture, competitive benefits, and opportunities to grow your career while making a meaningful impact. Come be part of a Great Place to Work!

Employee Perks:

• Base & Variable Pay Structures
• Paid Personal, Holiday & Volunteer Time Off
• Professional Development & Training
• Student Loan Repayment & Tuition Reimbursement Programs
• Medical, Dental & Vision Coverage
• 401(k) With Employer Match & Non-Elective Employer Contribution
• Life, Short-term & Long-term Disability Insurance
• Discounted Loan Rates & Fees

Hudson Valley Federal Credit Union is an AA/EEO employer committed to equal opportunity and employee diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, military or veteran status, genetic information, marital or familial status, domestic violence victim status, or any other characteristic protected by law.