InfoSec Management & Compliance Lead
Core
Define and enforce the security posture of the enterprise data lakehouse platform, owning the intersection of cybersecurity, data privacy, and regulatory compliance.
Role type
Senior InfoSec Management & Compliance Lead
Builds
Enterprise data lakehouse platform security and compliance programs
Domain
Data Security & Regulatory Compliance
Deliverable
production ML models
Required skills
Data lakehouse security (Unity Catalog, Snowflake RBAC), Cloud security (AWS IAM/KMS, Azure Purview/Defender, GCP Security Command Center), Regulatory compliance (GDPR, CCPA, HIPAA, SOC 2, PCI-DSS), Risk assessment & threat modeling, SIEM/DLP, Encryption standards, Security incident response, Security frameworks (NIST, CIS, ISO 27001)
Preferred skills
Zero trust architecture, Data fabric security, AI/ML model security
Technologies
Unity Catalog, Snowflake, AWS IAM, Azure Purview, GCP Security Command Center, SIEM, DLP
Responsibilities
Define and implement data security frameworks (RBAC, ABAC, column/row-level security); Lead compliance programs for GDPR, CCPA, HIPAA, SOC 2, PCI-DSS; Conduct data risk assessments and threat modeling; Partner with platform teams to embed security controls in CI/CD; Manage vulnerability assessments, penetration testing, and audit response; Oversee encryption standards for data at rest and in transit; Develop and maintain data classification policies; Respond to security incidents and drive remediation; Train engineering teams on security policies.
Seniority
Senior, hands-on IC
