Title: Senior Database Compliance Analyst

Location: Dallas ,TX

Duration: 12 Months Plus

GENERAL SUMMARY :

The Senior Database Compliance Analyst, will be responsible for ensuring the security and compliance of DFW database environments and provide compliance guidance for other database environments where DFW data is located. This role involves a mix of hands-on technical work, policy implementation, and collaboration with various teams to ensure our databases are secure, compliant with industry standards, and aligned with DFW s cyber risk management strategies, playing a pivotal role in protecting sensitive data from unauthorized access and breaches..

PRINCIPAL DUTIES AND RESPONSIBILITIES :

1. Ensure applicable security controls are in place to protect the confidentiality, integrity, and availability of DFW s data, networks, systems, and services.

2. Conduct regular security audits and risk assessments on database systems.

3. Conducting periodic reviews of vendors certifications and compliance.

4. Provide guidance and training on database security to staff.

5. Participate in the development and implementation of security policies and procedures.

6. Lead the design and configuration of database and operating system security controls.

7. Ensure data protection measures are up to date based on DFW Board policies and applicable laws, regulations, and requirements to prevent unauthorized access, misuse, modification, or destruction of sensitive information.

8. Monitor access to sensitive data for Payment Card Industry (PCI) and Criminal Justice Information (CJI) and other applicable standards.

9. Collaborate with ITS teams to ensure compliance with security best practices.

10. Develop and maintain standards for operating system and database configurations.

11. Implement Data-in-Transit and Data-at-Rest encryption controls for sensitive data.

12. Develops and manages a database compliance reporting framework.

13. Performs other related duties as assigned.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES :

1. Knowledge of Linux/Windows Operating Systems and Oracle/Microsoft SQL database servers.

2. Knowledge of shell script programming, SQL &, PL/SQL.

3. Knowledge of industry standards and regulations (e.g., CIS Benchmarks, GDPR, CIS Controls, ISO 27001, NIST 800-53) related to security and data privacy.

4. Strong analytical and problem-solving abilities.

5. Effective communication skills for technical and non-technical audiences.

6. Adaptability to new technologies and changing security landscapes.

7. Ability to work in a fast-paced and dynamic environment.

8. Ability to utilize analytical and problem-solving skills.

9. Ability to communicate and collaborate with cross-functional teams.

10. Collaborative working with teams and cross-functional departments.

DESIRABLE :

Ten (10) plus years of experience in database administration, IT security compliance and risk management.

Experience in handling data security for Payment Card Industry (PCI), Criminal Justice Information (CJI), and Health Insurance Portability and Accountability (HIPAA).

Audit experience preferred.

Experience with NIST SP 800-53, encryption technologies, and firewalls.

Proficiency in multiple programming languages, operating systems, system services, communications protocols, and network configuration (e.g., server platforms, Unix shell scripting, Perl, C, C , Java, Visual Basic, Cisco routers and switches, relational databases)

CISSP, CISA, Oracle DBA, or Microsoft SQL/Azure data services certification.