Data Security Administration

Job Summary:

The ideal candidate will be responsible for implementing, maintaining, and monitoring our data security. This role requires strong knowledge of SOC 2 compliance and data protection guidelines. A key part of this position involves developing and delivering effective security training programs for all employees in both virtual and in-person classroom settings.

Key Responsibilities:

• Security Administration: Manage and maintain security systems, including firewalls, intrusion detection/prevention systems (IDS/IPS), and data loss prevention (DLP) tools. Perform regular security audits and vulnerability assessments.
  
• Compliance & Policy Enforcement: Ensure all data handling and security procedures comply with industry standards, particularly SOC 2 Type 1 and Type 2 requirements. Develop, update, and enforce company-wide data protection policies and protocols.
  
• Data Protection: Implement and manage processes to protect sensitive data from unauthorized access, modification, or disclosure. This includes data encryption, access controls, and secure data storage solutions.
  
• Training & Awareness: Design, develop, and deliver engaging security awareness training sessions for employees at all levels. Lead group discussions in a classroom setting to ensure understanding and retention of key security concepts. Create training materials, including presentations, videos, and documentation.
  
• Incident Response: Participate in the security incident response team, assisting in the investigation and resolution of security breaches or incidents.
  

Qualifications:

• Minimum of 3-5 years of experience in an IT security or data protection role.
• Proven experience with SOC 2 compliance audits and procedures.
• Demonstrated experience in developing and delivering corporate training programs, specifically in a classroom or workshop setting.

• Strong understanding of data security principles, best practices, and regulatory frameworks
• Excellent communication and presentation skills, with the ability to explain complex technical concepts to non-technical audiences.
• Strong analytical and problem-solving skills.
• Ability to work independently and as part of a team.