Data Security Analyst - Cyber Security

Key Responsibilities :

• Design and implement data obfuscation and data masking strategies for structured and unstructured data
• Architect and deploy solutions for encryption, tokenization, and key management systems
• Work on attribute-based access control (ABAC) and fine-grained access enforcement mechanisms
• Collaborate with cross-functional teams to ensure secure integration of data protection solutions into business applications
• Evaluate and improve existing security infrastructure with respect to data confidentiality and compliance standards (e.g., GDPR, HIPAA, PCI-DSS)
• Conduct security assessments, identify vulnerabilities, and provide mitigation strategies related to data security
• Prepare technical documentation, risk assessments, and compliance reports for internal and external stakeholders
• Support internal audit teams and participate in incident response activities where required
• Provide guidance to engineering teams on secure coding and secure data handling best practices
• Stay up to date with industry trends, threats, and technologies in the data protection and cyber security Qualifications :
• 8+ years of overall IT experience with at least 4+ years in a cybersecurity role focused on data protection and obfuscation
• Proven hands-on experience in data security technologies, including :
• Data Obfuscation / Masking Tools
• Encryption & Tokenization
• Key Management Systems (KMS)
• Attribute-Based Access Control (ABAC)
• Strong understanding of security architecture and design principles
• Familiarity with compliance standards (GDPR, HIPAA, PCI-DSS, etc.) and secure data lifecycle management
• Ability to work independently and own end-to-end responsibility for security implementation within the assigned product or platform
• Excellent communication and stakeholder engagement skills at both technical and senior leadership levels
• Strong problem-solving and analytical to Have :
• Experience with cloud data security (AWS, Azure, or GCP)
• Knowledge of secure development lifecycle (SDLC)
• Certifications such as CISSP, CCSP, CISA, or CEH

(ref : hirist.tech)