Please note that this role is part of our talent pipeline for future hiring needs. While there may not be an immediate opening, we regularly expand our team and are interested in connecting with talented professionals.

The InfoSec Management & Compliance Lead is responsible for defining and enforcing the security posture of the enterprise data lakehouse platform. This role owns the intersection of cybersecurity, data privacy, and regulatory compliance, ensuring that data assets are protected at rest, in transit, and in use.  

KEY RESPONSIBILITIES  

▸ Define and implement the data security framework for the lakehouse, including RBAC, ABAC, and column/row-level security  

▸ Lead compliance programs for applicable regulations: GDPR, CCPA, HIPAA, SOC 2, PCI-DSS  

▸ Conduct data risk assessments and threat modeling for platform components and data pipelines  

▸ Partner with platform teams to ensure security controls are embedded in CI/CD and data workflows  

▸ Manage vulnerability assessments, penetration testing, and audit response for the lakehouse environment  

▸ Oversee encryption standards for data at rest and in transit across cloud and on-prem storage  

▸ Develop and maintain data classification policies and enforce tagging standards  

▸ Respond to security incidents, conduct root cause analysis, and drive remediation  

▸ Maintain compliance documentation, evidence collection, and audit artifacts  

▸ Train engineering and operations teams on security policies and secure data handling practices  

REQUIRED QUALIFICATIONS  

▸ 8+ years in information security, with 3+ years in data or cloud platform security  

▸ Deep knowledge of cloud security services: AWS IAM/KMS, Azure Purview/Defender, GCP Security Command Center  

▸ Hands-on experience with Unity Catalog (Databricks), Snowflake RBAC, or equivalent lakehouse security layers  

▸ Proven track record managing regulatory compliance programs (SOC 2, GDPR, HIPAA)  

▸ Strong understanding of NIST, CIS, and ISO 27001 security frameworks  

▸ Experience with SIEM tools, DLP solutions, and security monitoring platforms  

▸ Excellent communication skills for translating security risks to executive and business stakeholders  

▸ Bachelors degree in Cybersecurity, Information Systems, or related field  

PREFERRED QUALIFICATIONS  

▸ CISSP, CISM, CISA, or CCSP certification strongly preferred  

▸ Experience with zero trust architecture and data fabric security models  

▸ Familiarity with AI/ML model security and responsible AI governance  

What Dynata Can Offer You

In addition to a competitive salary, we offer a comprehensive range of benefits tailored to each country. Our benefits are designed to support your well-being and help you achieve a healthy work-life balance.