Job Title: Data Protection Analyst

Reports To: Data Protection Manager

Direct Reports: N/A

Salary Grade: 8

SUMMARY

The Data Protection Analyst reports to the Data Protection Manager. They provide guidance throughout the entire data lifecycle, from inception through disposal, ensuring access to data is managed and maintained following rigorous security, engineering and governance principles. Under the guidance of the Data Protection Manager, they implement programs utilizing the selected frameworks by establishing highly effective policies, protocols, and appropriate collaboration among teams. 

EDUCATION AND EXPERIENCE REQUIREMENTS

• Bachelor's degree preferred in computer science, engineering or related technical field.
• 1-3 years of cybersecurity or information technology practitioner experience.
• Relevant entry-level security or technical certifications (CompTIA A , SEC , or GIAC GSEC) desirable
• Technical experience in configuring, implementing and maintaining enterprise networks, hosts, applications and directory services preferred.
• Ideally familiar with regulatory requirements and laws, such as Payment Card Industry (PCI), Federal Financial Institutions Examination Council (FFIEC), Sarbanes-Oxley Act (SOX), HIPAA, GDPR, California Consumer Privacy Act (CCPA) and Gramm-Leach-Bliley Act (GLBA).
• Track record acting with integrity, taking pride in work, seeking to excel, and being curious and flexible.
• Strong written and oral communication skills across varying levels of the organization.
• Understanding of service design, delivery concepts and control frameworks.
• Organized with the ability to prioritize and complete tasks within defined SLAs.
• Excellent judgment and the ability to make quick decisions when working with complex situations.
• High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.
• Participate in all required compliance training, including Bank Secrecy Act/anti-money laundering training, as well as internal and external training programs, online training, meetings, and seminars/conferences, etc.

JOB FUNCTIONS

• Analyze system reports to identify gaps in security control coverage to produce management reporting metrics, remediation plans, or take direct action to mitigate via scripted tasks or documentation updates.
• Monitor system dashboards, alerts, and scheduled reporting to identify and escalate security and technical issues that may impact the organizations data or systems. 
• Compile and format reporting to provide visibility to management and to assist with security control implementations, audits, or adjustments.
• Assist with communication and coordination of data protection project tasks and resources.

• Preferably some basic experience with one or more scripting languages (e.g., Python, PowerShell and Bash).
• Preferably some basic experience with DLP products for data-at-rest and data-in-motion.

• Review daily threat intelligence and security news feeds to maintain security awareness.
• Other duties as assigned.

SUPERVISORY RESPONSIBILITY

Currently this position does not require any supervisory responsibilities

WORK ENVIRONMENT

Greenville, SC – preferred, anywhere in the UCBI footprint will be considered.

POSITION TYPE

This is a full-time position that requires schedule flexibility to work evenings and weekends as needed.

TRAVEL

This position requires up to 5% travel.

OTHER

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Other duties, responsibilities and activities may change or be assigned at any time with or without notice.