Senior Data Security Governance Consultant- Remote (Anywhere in the U.S.)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

GuidePoint is looking for a motivated and engaged Senior Data Security Governance Consultant to join our growing team! This is a fully remote, individual contributor role with occasional travel to support client consulting engagements. The successful candidate is a hard-working, self-motivated data security professional who can help companies evaluate and enhance their data security practices according to applicable legal requirements and industry best practices. The consultant will mentor and share learnings with colleagues to foster a learning culture.

Role and Responsibilities: 

• Deliver successful consulting engagements across multiple Data Security Governance service offerings while maintaining high customer satisfaction.
• Conduct gap assessments of customer's data protection controls against legal, regulatory, contractual, and business data protection requirements, and analyze the associated security risks.
• Perform maturity assessment of customer’s data protection landscape and data security governance policies, processes, and controls and assign maturity ratings based on the C3 Working Group Data Security Maturity Model framework.
• Develop Data Security Governance strategies that address organization’s unique business needs, incorporating policies and processes that leverage cutting-edge technologies to deliver strong data protection controls across the data lifecycle.
• Facilitate vendor data discovery scans of cloud and on-prem sensitive data repositories and the establishment and maintenance of sensitive data catalogs.
• Facilitate sensitive data identification workshops to determine sensitive data types and formats.
• Develop sensitive data risk remediation recommendations and organize these recommendations in multi-year roadmaps.
• Provide guidance in developing data governance roles and responsibilities for Data Owners, Data Stewards, and Data Custodians, and the development of cross-functional Data Governance Committee roles and responsibilities.
• Develop implementation playbooks to help drive the execution and rollout of Data Security Governance policies, processes, and technology controls.
• Develop data security-related presentations to various client stakeholders.
• Help facilitate integration of data protection activities into existing Change Management, System Development, and System Acquisition processes.
• Lead workshops to onboard client teams to data governance policies and tools.
• Serve as a liaison between Business, Functional areas, and technology to ensure that data-related business requirements are clearly defined and communicated.
• Define metrics for performance, compliance, and adoption of data-related policies, standards, and practices.
• Provide guidance on the selection of technologies to support data governance efforts, such as Data Loss Prevention (DLP), Data Security Posture Management (DSPM), and other solutions.
• Contribute to the growth, maturation, and socialization of the GuidePoint data security governance consulting practice.
• Establish strong relationships and trust with customers to understand customers’ business environments and requirements.
• Work with other GuidePoint Security practices as part of a cohesive cross-functional team.

Required Experience and Position Requirements:

• Minimum of 5 years of experience as a Data Security Professional.
• Minimum of 3 years of direct experience performing data security governance-related consulting services for clients of various verticals, including financial and insurance, retail, healthcare, service providers (SaaS, PaaS, etc.), manufacturing, etc.
• Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships.
• Strong understanding of data protection concepts, policies, processes, controls, and frameworks.
• Proven experience in defining, implementing, and assessing data security governance policies, processes, and standards.
• Strong written communication skills to aid in the creation of customer deliverables.
• Strong oral communication skills, including the ability to articulate thoughts and distill complex problems into digestible information to be consumed by anyone from technical resources to the highest level of management; proven ex