Analyst, Data Security and Privacy

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services.  Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results.  We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions.  Join our dynamic team and make your mark on the payments technology landscape of tomorrow. 

Summary of This Role

The Analyst, Data Security and Privacy role is an exciting opportunity to bring about data driven transformation and drive execution of enterprise-wide governance and management of data assets.
As a member of the Enterprise Data & AI Governance (EDAiG) program, the Analyst, Data Security and Privacy role is responsible for executing data asset management standards and driving adoption of the data asset management framework, with an emphasis on working with enterprise, data, and business stakeholders to identify and highlight where sensitive data exists within the organization. The Analyst will leverage tools and collaborate with Information Security to provide visibility into on-premises and cloud-hosted data stores, classify data, and validate security controls in-place to secure data at-rest. The Analyst will also collaborate with Privacy to confirm where personal data is stored/processed, determine data subject categorization, capture business purpose/need associated with processing activities, and implement data minimization practices (i.e., retention and destruction).
The Analyst will also lead the implementation of the enterprise Issue Management Standard on behalf of the EDAiG program for identified data risk and issues. The Analyst will coordinate with business, data, and risk stakeholders to execute issue management processes, including identification, intake, analysis, prioritization, remediation/acceptance, and closure of identified gaps. The Analyst is a visible role across the enterprise, engaging with business, technology, and corporate functions to define and document data requirements, collect artifacts and streamline practices, research and curate documentation, and implement process improvements.

What Part Will You Play?

• Assist the EDAiG program in working with Information Security, Privacy, Data Owners/Stewards/Custodians, Risk, Compliance, IT, Legal, Internal Audit, and business stakeholders to ensure data security and privacy requirements are implemented and enforced consistently for structured and unstructured data throughout GPN’s on-premise and cloud environments.
• Employ data discovery tools (specifically Informatica Enterprise Data Catalog, Data Quality, and Axon) to identify sensitive data, ensure implementation of GPN’s Data Classification Standard, validate protection of sensitive data at-rest, and capture sensitive data locations and business usage.
• Engage with Privacy, Data Stewards/Custodians, and business stakeholders to validate where personal data is stored/processed, capture business purpose/need, maintain sensitive data inventories, and ensure data use assessments in OneTrust accurately reflect current business processing activities and applicable data subjects.
• Engage with Data Stewards, IT, Information Security, and Enterprise Architecture stakeholders to ensure organizational inventories accurately capture data asset deployment information, hosting locations, and SaaS/PaaS/IaaS usage.
• Assist the EDAiG program in working with Information Security, Privacy, Data Owners/Stewards/Custodians, Risk, Compliance, IT, Legal, Internal Audit, and business stakeholders to inventory, prioritize, manage, remediate, and monitor data risks and issues.
• Serve as the EDAiG program’s primary representative for intake, classification, and rating of data risks and issues identified via assessments, EDAiG technology (e.g., sensitive data discovery scans), the enterprise Self-Identified Risk Process, and other risk management activities.
• Support the initial review and vetting of newly discovered data quality issues (e.g., identified via data quality rules, checks, and assessments), including working with Business Unit Data Stewards, EDAiG team members, and associated business stakeholders to determine the appropriate prioritization, rating, and system for entry/tracking (e.g., Jira, Rally, Archer, etc.). 
• Manage the documentation of identified data risk and issues within RSA Archer as the Issue Author, including entering initial/known issue date, assigning issue/remediation/acceptance ownership, and populating other necessary metadata (i.e., so