Job Description:

We are seeking a Sr. Database Compliance Analyst who would be responsible for ensuring the security and compliance of database environments and provide compliance guidance. This role involves a mix of hands-on technical work, policy implementation, and collaboration with various teams to ensure databases are secure, compliant with industry standards, and aligned with the organization's cyber risk management strategies, playing a pivotal role in protecting sensitive data from unauthorized access and breaches.

Required Experience (10 years):

• Experience in database administration, IT security compliance and risk management.
• Experience and expertise in database security, encryption, access controls.
• Experience with compliance frameworks: NIST 800-53, HIPAA, GDPR, ISO 27001.
• Experience and proficiency in SQL database auditing, performing vulnerability assessments, implementing security measures, monitoring and user access reviews.
• Experience with regulatory compliance implementation.
• Experience with internal control.
• Experience and knowledge of Linux/Windows Operating Systems and Oracle/Microsoft SQL database servers.
• Experience and knowledge of shell script programming, SQL &, PL/SQL.
• Experience and knowledge of industry standards and regulations related to security and data privacy - eCIS Benchmarks, GDPR, CIS Controls, ISO 27001, NIST 800-53.
• Experience demonstrating effective communication skills for technical and non-technical audiences and collaborating with cross-functional teams.
• Experience demonstrating adaptability to new technologies and changing security landscapes.
• Experience working in a fast-paced and dynamic environment.
• Experience demonstrating strong analytical and problem-solving skills.

Required Certification:

• Oracle DBA or MySQL DBA

Preferred Certification:

• CISSP, CISA, Oracle DBA, or Microsoft SQL/Azure Data Services.

Preferred Experience:

• Experience handling data security for Payment Card Industry (PCI), Criminal Justice Information (CJI), and Health Insurance Portability and Accountability (HIPAA).
• Experience performing IT Audits.
• Experience with NIST SP 800-53, encryption technologies, and firewalls.
• Proficiency in multiple programming languages, operating systems, system services, communications protocols, and network configuration (e.g., server platforms, Unix shell scripting, Perl, C, C , Java, Visual Basic, Cisco routers and switches, relational databases).

Education Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
  • Equivalent combinations of education and/or experience may be considered.

Responsibilities:

• Ensure applicable security controls are in place to protect the confidentiality, integrity, and availability of DFW's data, networks, systems, and services.
• Conduct regular security audits and risk assessments on database systems.
• Conducting periodic reviews of vendors' certifications and compliance.
• Provide guidance and training on database security to staff.
• Participate in the development and implementation of security policies and procedures.
• Lead the design and configuration of database and operating system security controls.
• Ensure data protection measures are up to date based on DFW Board policies and applicable laws, regulations, and requirements to prevent unauthorized access, misuse, modification, or destruction of sensitive information.
• Monitor access to sensitive data for Payment Card Industry (PCI) and Criminal Justice Information (CJI) and other applicable standards.
• Collaborate with ITS teams to ensure compliance with security best practices.
• Develop and maintain standards for operating system and database configurations.
• Implement Data-in-Transit and Data-at-Rest encryption controls for sensitive data.
• Develops and manages a database compliance reporting framework.
• Performs other related duties as assigned.