Senior Data Protection Analyst

Job Description

JOB INFORMATION

Title:

Senior Data Protection Analyst

Officer Title:

Grade:

29

FLSA Classification:

Exempt

Date Last Edited:

7/28/2026

Reports To:

Chief Information Security Officer

Department:

Cybersecurity Governance and Risk

URL Link

https://hvfcu.jdxpert.com/ShowJob.aspx?EntityID=2&jobcode=1241

PRIMARY FUNCTION

Support the CISO in ensuring that data governance policies and data protection controls are aligned, effective, and consistently applied across the credit union's data estate. This role bridges data governance and cybersecurity by assessing controls for data classification, access, encryption, and retention.  Evaluate data protection risks, support regulatory compliance (GLBA, FFIEC, NCUA Part 748, NIST, NYDFS Part 500), and ensure that governance and security controls work together to safeguard member and institutional data.  Partner with Information Security, IT, Data Governance, and business units to align security practices with the credit union's Information Security and Data Governance Programs.  Serve as the primary coordination point between the Data Governance program and the Cybersecurity team, ensuring that data protection requirements are embedded in governance policies and that governance decisions are informed by security risk.

•

Evaluate and test data protection controls including encryption, masking, data loss prevention (DLP), access management, and file transfer security across databases, data warehouses, and the Databricks platform

•

Assess logical access controls and role-based access configurations to ensure alignment with governance policies and least-privilege principles.

•

Participate in reviews of new technologies and vendors to assess data security posture and governance standards.

•

Contribute security findings and recommendations to governance policy development.

•

Collaborate with the Data Governance Lead to ensure data protection requirements are embedded in governance policies, standards, and procedures.

•

Support the data classification framework by ensuring consistent tagging and handling of sensitive data aligns with both governance definitions and security controls.

•

Provide security input to the Data Governance Committee on access governance, data protection risks, and control effectiveness. 

•

Partner with Data Stewards, Data Quality Analysts, and IT Security to remediate issues that impact data integrity or confidentiality.

•

Maintain awareness of regulatory requirements (GLBA, NCUA, CFPB, FFIEC, NIST) and assist in mapping data protection controls to those requirements.

•

Support audit and regulatory examinations by providing documentation of data security controls, evidence of access reviews, and remediation actions

•

Support the implementation of privacy and security-by-design principles within data workflows and business applications.

•

Participate in data-related risk assessments and contribute to security incident investigations involving data exposure, unauthorized access, or policy violations. Assist in developing and maintaining procedures for secure data handling, retention, and disposal aligned with the data governance retention framework. Contribute data protection metrics to data governance dashboards and reporting.

•

Support awareness efforts that promote secure data practices across departments, reinforcing governance policies with practical security guidance. Work cross-functionally with Data Governance, IT, and business units to ensure security controls keep pace with platform changes, including the Databricks/Unity Catalog environment.

•

Adhere to all Credit Union policies, procedures, and regulatory agency requirements. Participate in all required and recommended training and development including, but not limited to, Bank Secrecy Act training (BSA) and demonstrate attained knowledge. Participate on Credit Union teams, projects and strategic initiatives when the opportunity arises. Perform additional duties and special projects as assigned.

•

Embrace and apply HVCU’s guiding principles to all activities and responsibilities. This includes the Credit Union’s Mission, Vision, Core Values, Employee and Member Value Propositions, Sales and Service Model, and commitment to Lean Six Sigma practices. Support the Credit Union’s initiatives by demonstrating teamwork and professionalism.

•

Responsible for regular and predictable attendance including punctuality.

Bachelor’s Degree

Information Systems, Cybersecurity, or related field

X

• CISSP, CompTIA Security+, SSCP, CISA, CDMP, or equivalent data protection or security certification.

X

Minimum 5 Years

Work history in data security, governance, or information risk management field.

X

Minimum 1 Year

Work history in a financial institution or other regulated environment.

X

•

Understanding of data governance principles, metadata management, and data lifecycle management.

•

Strong analytical skills with attention to detail and accuracy.

•

Knowledge of data security tools, concepts, and practices, including encryption, data loss prevention, and access controls.

•

Familiarity with privacy and compliance requirements related to member data (GLBA, NIST, NCUA Part 748).

•

Ability to translate technical security issues into clear business language.

•

Excellent communication and documentation skills.

•

Proficiency in Excel and data visualization tools (Power BI, Tableau); SQL experience a plus.

•

Ability to collaborate effectively with business units, IT, and compliance partners.

•

Up-to-date knowledge of emerging trends in cybersecurity governance, risk management and compliance requirements.

•

Advanced analytical, problem-solving, and organizational skills.

•

Must be able to demonstrate working knowledge of finance and accounting concepts.

•

Advanced proficiency in Microsoft Office Software (Word, Excel, Outlook, PowerPoint, etc.)

•

Must have experience with the application of computer software models.

•

Must be able to learn new software products.

•

Advanced verbal, written and presentation skills.

•

Must be able to demonstrate advanced analytical, communication and interpersonal skills.

•

Ability to effectively communicate with Senior Management.

•

Ability to work in a fast-paced environment and deal with a variety of internal/external customer and vendor situations.

PHYSICAL DEMANDS

Frequency

Physical Demand

Weight (lbs.)

Frequently

Sit for prolonged periods of time

Frequently

Required to communicate verbally

Frequently

Normal range of vision and hearing abilities required

Occasionally

Lift and/or move objects

30

Occasionally

Travel outside of work location to attend meetings and training programs

Frequently

Required to skillfully operate a computer, telephone and other standard office equipment

WORK ENVIRONMENT

•

Typically the noise level in the work environment is low to moderate.

•

May experience occasional job stress in dealing with difficult situations and/or high volume.

•

May experience occasional job stress in response to job demands.

•

High energy, high impact atmosphere.

•

There are no significant hazardous conditions.

View Competencies

Work Standards

Sets high standards of performance for self and others; assumes responsibility and accountability for successfully completing assignments or tasks.

Level 3

1.  Coaches others to develop effective techniques for producing expected results.  2. Confirms achievement and acceptance of results to ensure process closure.  3. Escalates unusual findings that could have an impact on future process cycles.  4. Mobilizes group to anticipate likely results expected in future process cycles.  5. Recognizes significant results in ways that sustain employee motivation to achieve.  6. Sets critical work standards and expectations for a group or unit.

Flexibility and Adaptability

Adapts as needed; knowledge of successful approaches, tools, and techniques for dealing with changes and adapting to a changing environment.

Level 3

1. Helps others adapt to changing environments and accept new situations.  2. Identifies and elevates process improvements.  3. Leverages prior experience as a help towards handling changing situations.  4. Makes progress in an atmosphere of ambiguity and uncertainty.  5. Recovers from disappointments and setbacks.  6. Works effectively with unstructured teams, situations, or environments.

Information Security Audits

Knowledge of and the ability to utilize tools and techniques for assessing the effectiveness of information security measures, identifying potential risk exposures, and protecting the availability, confidentiality and audit trails of information from destruction or manipulation.

Level 2

1. Assists in conducting, documenting and following-up on security audits.

2. Provides inventory reports on information, software and physical assets.

3. Monitors compliance to security checklists and documents checklist exceptions.

4. Participates in documenting audit standards/procedures that are unique to a line of business.

5. Documents deficiencies and corrective plans, appropriately following up on their resolution in a timely manner.

Analytical Thinking

Knowledge of techniques and tools that promote effective analysis and the ability to determine the root cause of organizational problems and create alternative solutions that resolve the problems in the best interest of the business.

Level 2

1. Approaches a situation or problem by defining the problem or issue and determining its significance.

2. Identifies the major forces, events and people impacting and impacted by the situation at hand.

3. Uses flow charts, Pareto charts, fish diagrams, etc. to disclose meaningful data patterns.

4. Uses logic and intuition to make inferences about the meaning of the data and arrive at conclusions.

5. Makes a systematic comparison of two or more alternative solutions.

Service Excellence

Consistently incorporates Hudson Valley's member and employee value proposition, reinforcing organizational culture and brand differentiators.

Level 2

1. Creates a positive team environment by celebrating successes and driving excellence.  2. Dedicates required time and energy to assignments or tasks to ensure that no aspect of the work is neglected; works to overcome obstacles to completing tasks or assignments.  3. Effectively communicates the connection between culture and the business strategy.  4. Implements effective strategies and activities that promote long term customer loyalty.  5. Inspires and strives for excellence in all aspects of work including setting high performance goals for oneself and others.

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee in this position.  Additional functions and requirements may be assigned by supervisors as deemed appropriate, with or without notice.

Nothing contained in this material creates a contract of employment between an employee and Hudson Valley Federal Credit Union or otherwise alters the at-will nature of the employment relationship.

Are you able to perform the essential functions listed in this job description with or without reasonable accommodation?  YES_______  NO_______

By signing below you certify that you have received this job description and understand the requirements, essential functions and duties of the position.  If you are currently employed in this position, your signature acknowledge that this job description accurately describes the position, including its essential functions.

Name:  _____________________________________________

Signature: _____________________________________________

Date:  _____________________________________________ 

Please also note that Hudson Valley Federal Credit Union respects the religious beliefs and practices of employees and will, on request, reasonably accommodate its employees when a reasonable accommodation is available that does not create an undue hardship on the Credit Union’s business.  Therefore, unavailability for work due to religious observances or practices may not be a bar to employment.