Sr. Database Compliance Analyst

Location: DFW Airport Headquarters, 2400 Aviation Dr, DFW Airport, TX 75261

Salary: $65.03 hr. plus 8 days holiday pay and 15 days PTO

Internal Reference 240604

Job Description:

We are seeking a Sr. Database Compliance Analyst who would be responsible for ensuring the security and compliance of database environments and provide compliance guidance. This role involves a mix of hands-on technical work, policy implementation, and collaboration with various teams to ensure databases are secure, compliant with industry standards, and aligned with the organization's cyber risk management strategies, playing a pivotal role in protecting sensitive data from unauthorized access and breaches.

Required Experience (10 years):

• Experience in database administration, IT security compliance and risk management.
• Experience and expertise in database security, encryption, access controls.
• Experience with compliance frameworks: NIST 800-53, HIPAA, GDPR, ISO 27001.
• Experience and proficiency in SQL database auditing, performing vulnerability assessments, implementing security measures, monitoring and user access reviews.
• Experience with regulatory compliance implementation.
• Experience with internal control.
• Experience and knowledge of Linux/Windows Operating Systems and Oracle/Microsoft SQL database servers.
• Experience and knowledge of shell script programming, SQL &, PL/SQL.
• Experience and knowledge of industry standards and regulations related to security and data privacy - eCIS Benchmarks, GDPR, CIS Controls, ISO 27001, NIST 800-53.
• Experience demonstrating effective communication skills for technical and non-technical audiences and collaborating with cross-functional teams.
• Experience demonstrating adaptability to new technologies and changing security landscapes.
• Experience working in a fast-paced and dynamic environment.
• Experience demonstrating strong analytical and problem-solving skills.

Required Certification:

• Oracle DBA or MySQL DBA

Preferred Certification:

• CISSP, CISA, Oracle DBA, or Microsoft SQL/Azure Data Services.

Education Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
  • Equivalent combinations of education and/or experience may be considered.

Responsibilities:

• Ensure applicable security controls are in place to protect the confidentiality, integrity, and availability of DFW's data, networks, systems, and services.
• Conduct regular security audits and risk assessments on database systems.
• Conducting periodic reviews of vendors' certifications and compliance.
• Provide guidance and training on database security to staff.
• Participate in the development and implementation of security policies and procedures.
• Lead the design and configuration of database and operating system security controls.
• Ensure data protection measures are up to date based on DFW Board policies and applicable laws, regulations, and requirements to prevent unauthorized access, misuse, modification, or destruction of sensitive information.
• Monitor access to sensitive data for Payment Card Industry (PCI) and Criminal Justice Information (CJI) and other applicable standards.
• Collaborate with ITS teams to ensure compliance with security best practices.
• Develop and maintain standards for operating system and database configurations.
• Implement Data-in-Transit and Data-at-Rest encryption controls for sensitive data.
• Develops and manages a database compliance reporting framework.
• Performs other related duties as assigned.

Benefits Overview: Full-time employees are offered comprehensive and competitive benefits package including paid vacation, sick leave, holidays, health insurance, life insurance, military leave, training, tuition reimbursement, a wellness program, short- and long-term disability, 401(k) retirement plan with company matches/immediate vesting, commuter benefits, and more.

EEO Policy: It is our policy to promote equal employment opportunities. All personnel decisions, including, but not limited to, recruiting, hiring, training, promotion, compensation, benefits, and termination, are made without regard to race, creed, color, religion, national origin, sex, age, marital status, sexual orientation, gender identity, citizenship status, veteran status, disability, or any other characteristic protected by applicable federal, state or local law.