Senior Data Protection Analyst

Hudson Valley Credit Union is currently recruiting for the position of Senior Data Protection Analyst.

Primary Function: Support the CISO in ensuring that data governance policies and data protection controls are aligned, effective, and consistently applied across the credit union's data estate.

This role bridges data governance and cybersecurity by assessing controls for data classification, access, encryption, and retention.

Evaluate data protection risks, support regulatory compliance (GLBA, FFIEC, NCUA Part 748, NIST, NYDFS Part 500), and ensure that governance and security controls work together to safeguard member and institutional data.

Partner with Information Security, IT, Data Governance, and business units to align security practices with the credit union's Information Security and Data Governance Programs.

Serve as the primary coordination point between the Data Governance program and the Cybersecurity team, ensuring that data protection requirements are embedded in governance policies and that governance decisions are informed by security risk.

• Evaluate and test data protection controls including encryption, masking, data loss prevention (DLP), access management, and file transfer security across databases, data warehouses, and the Databricks platform
• Assess logical access controls and role-based access configurations to ensure alignment with governance policies and least-privilege principles.
• Participate in reviews of new technologies and vendors to assess data security posture with governance standards.
• Contribute security findings and recommendations to governance policy development.
• Collaborate with the Data Governance Lead to ensure data protection requirements are embedded in governance policies, standards, and procedures.
• Support the data classification framework by ensuring consistent tagging and handling of sensitive data aligns with both governance definitions and security controls.
• Provide security input to the Data Governance Committee on access governance, data protection risks, and control effectiveness.
• Partner with Data Stewards, Data Quality Analysts, and IT Security to remediate issues that impact data integrity or confidentiality.
• Maintain awareness of regulatory requirements (GLBA, NCUA, CFPB, FFIEC, NIST) and assist in mapping data protection controls to those requirements.
• Support audit and regulatory examinations by providing documentation of data security controls, evidence of access reviews, and remediation actions