Senior Data Security Governance Analyst - U.S. Based Remote Opportunity

Common App; Arlington (VA); On-site; USD 109,120 - 122,760; Full time

Benefits offered by this job

Work-Life balance

Virtual-first office

PTO

Nine floating holidays

Sick leave

Monthly remote work stipend

Monthly mobile stipend

Company provided life and AD&D

403(b) retirement plan

Job summary

Common App, a national not-for-profit serving higher education, seeks a Senior Data Security Governance Analyst to lead enterprise data security governance and SOC 2 readiness. The role partners with Legal, Security, and Tech teams to implement classification, PII controls, and access management across platforms.

You will shape governance for AI analytics while ensuring regulatory compliance and audit readiness.

Qualifications

• Candidates must live in the United States.
• Willing to travel to attend twice annual Common App Retreat.
• Bachelor's degree in Information Management, Data Science, Statistics, or a related field.
• 5-8 years of experience in data security governance, data risk management and compliance, and analytics.
• Experience developing, implementing, and maintaining data security governance framework and programs, including creating standards, policies, data classification framework, and access controls in alignment with the broader data governance strategy and data stewardship practices
• Strong knowledge of data security governance principles, including data classification, data lifecycle management, and PII protection
• Familiarity with SOC 2 framework and controls, including experience supporting audit readiness, control documentation, and evidence collection
• Familiarity with security implementation metrics, security adoption metrics, data protection metrics, and security incident metrics
• Understanding of data governance considerations for AI and advanced analytics, including data usage controls, model input governance, and risks related to sensitive data exposure
• Understanding of regulatory and compliance requirements related to data privacy and security (e.g., GDPR, CCPA, or similar frameworks
• Experience operationalizing governance within data platforms (e.g., data warehouses, ETL pipelines, semantic layers)
• Ability to translate policies and standards into practical, scalable processes and implementation requirements
• Knowledge of access control models (e.g., role-based access, least privilege) and data security best practices
• Strong analytical and problem-solving skills, with the ability to assess risk and identify control gaps.
• Experience working cross-functionally with technical and non-technical stakeholders, including Security, Legal, and business teams.
• Excellent written and verbal communication skills, including the ability to document standards and influence adoption.
• Strong organizational skills and attention to detail, particularly in managing governance artifacts and audit-related materials.
• Ability to manage multiple priorities and drive work forward in a complex, evolving environment
• Familiarity with data tools and environments (e.g., cloud data platforms such as Databricks)

Responsibilities

• Advance the EIM Data Security initiative and SOC 2 readiness.
• Define and operationalize governance policies, standards, and controls.
• Collaborate with Technical Operations, Cybersecurity, Legal, and business units.
• Establish data classification, secure PII handling, and access control frameworks.
• Support governance for AI and advanced analytics workflows.
• Document, monitor, and ensure auditability of data governance artifacts.

Skills

Data governance

SOC 2

PII protection

Data classification

Audit readiness

Regulatory compliance

Stakeholder collaboration

Data privacy

Analytics

Education

Bachelor's degree in Information Management, Data Science, Statistics, or related field

Master's or Doctoral degree in Information Management, Data Science, Statistics, or related field

Tools

Databricks

Tableau

Power BI

Job description

About Us

Do you have a passion for higher education? Do you want to make a positive impact on the college admissions process? Our staff help to remove barriers and encourage students to forge their path to a better future. Common App is a national not-for-profit organization dedicated to the pursuit of access, equity, and integrity in the college admission process. Each year we support more than 1 million students, one-third of whom are first-generation, as they apply to our more than 1100 diverse member colleges & universities using the Common App's free online application.

If you are an experienced data security professional and want to be part of a mission-driven non-profit that uses innovative technology to advance the college admission process, Common App may be a great match for you. Common App is currently searching for a Senior Data Security Governance Analyst.

Responsibilities

The Senior Data Security Governance Analyst plays a critical role in advancing the organization's Enterprise Information Management (EIM) strategy, with a focus on data security, protection, and responsible data use. The role leads the implementation of EIM Data Security initiatives and supports SOC 2 readiness by defining and operationalizing enterprise data security governance policies, standards, and controls, ensuring they are consistently applied across systems, workflows, and teams. Working in close partnership with Technical Operations, Cybersecurity, Legal, and business units, the analyst establishes and governs data classification, secure PII handling, and access control frameworks, while collaborating with technology teams responsible for technical implementation. The role also advances governance capabilities to support AI and advanced analytics workflows, ensuring appropriate data use, auditability, and alignment with privacy and regulatory requirements. By embedding governance into day-to-day operations and enabling scalable approaches to control implementation, documentation, and monitoring, this role ensures that data is secure, compliant, and trusted, while supporting its effective and responsible use to drive organizational value.

Requirements

QUALIFICATIONS

• Candidates must live in the United States
• Willing to travel to attend twice annual Common App Retreat
• Bachelor's degree in Information Management, Data Science, Statistics, or a related field
• 5-8 years of experience in data security governance, data risk management and compliance, and analytics
• Experience developing, implementing, and maintaining data security governance framework and programs, including creating standards, policies, data classification framework, and access controls in alignment with the broader data governance strategy and data stewardship practices
• Strong knowledge of data security governance principles, including data classification, data lifecycle management, and PII protection
• Familiarity with SOC 2 framework and controls, including experience supporting audit readiness, control documentation, and evidence collection
• Familiarity with security implementation metrics, security adoption metrics, data protection metrics, and security incident metrics
• Understanding of data governance considerations for AI and advanced analytics, including data usage controls, model input governance, and risks related to sensitive data exposure
• Understanding of regulatory and compliance requirements related to data privacy and security (e.g., GDPR, CCPA, or similar frameworks
• Experience operationalizing governance within data platforms (e.g., data warehouses, ETL pipelines, semantic layers)
• Ability to translate policies and standards into practical, scalable processes and implementation requirements
• Knowledge of access control models (e.g., role-based access, least privilege) and data security best practices
• Strong analytical and problem-solving skills, with the ability to assess risk and identify control gaps.
• Experience working cross-functionally with technical and non-technical stakeholders, including Security, Legal, and business teams.
• Excellent written and verbal communication skills, including the ability to document standards and influence adoption.
• Strong organizational skills and attention to detail, particularly in managing governance artifacts and audit-related materials.
• Ability to manage multiple priorities and drive work forward in a complex, evolving environment
• Familiarity with data tools and environments (e.g., cloud data platforms such as Databricks)

ideal candidate will possess:

• Master's or doctoral degree in Information Management, Data Science, Statistics, or a related field
• Background in regulatory or policy compliance related to data management
• Experience in data security governance, data management, privacy regulations and compliance, and analytics in higher education
• Familiarity with data visualization tools such as Tableau or Power BI for governance reporting
• Familiarity with higher education data definitions and architecture

PAY RANGE

• $109,120 - $122,760

Benefits

• Work-Life balance
• Virtual-first office
• Paid Time Off (PTO)
• Seven company-wide holidays
• Nine floating holidays*
• Sick leave
• Monthly mental health day
• floating holidays prorated depending on start date
• Virtual-first support
• Choice of PC of MAC laptop
• May choose an external monitor, keyboard, mouse, and/or headset
• One-time office set-up stipend
• Monthly remote work stipend
• Monthly mobile stipend
• Financial security
  • Market-based salaries
  • Performance-based bonus
  • 403(b) retirement plan
    • 5% company contribution
    • additional 5% company match
    • 3-year vesting schedule
    • Participation may begin immediately
• Health & wellness
  • Choice of two health insurance plans
    • Health Savings Account, depending on health plan selection
    • Medical Flexible Savings Account, depending on health plan selection
• Vision insurance
• Dental insurance
• Insurance coverage begins on the date of hire
• Dependent Care Flexible Spending Account
• Maven virtual clinic for women's and family health
• Company provided life and ad&d insurance
• Opportunity to purchase additional life insurance for self, spouse, and dependents
• Company provided short and long-term disability insurance

Career development

• Budgeted annual funds for professional development
• Growth opportunities within the company

Additional perks

• Mutual of Omaha Employee Assistance Program
• Mutual of Omaha will preparation services
• Mutual of Omaha travel assistance
• Payroll dedication pet insurance through PinPaws
• 1Password family account

We work to maintain the best possible environment for our staff, where people can learn and grow. We strive to provide a diverse, collaborative, team-oriented, creative environment where each person feels encouraged to contribute to our processes, decisions, planning, and culture.