Senior Data Security Specialist in Glasgow

Synechron is a leading digital consulting firm with 17,000+ collaborative employees in 55+ global offices across 17+ countries.

From our solid financial services industry foundation, we have become a prominent global digital consulting firm for large financial services and technology firms.

With a key focus on trust, and in partnership with our clients, we're leading modernization and digital optimization journeys with expertise that spans Consulting, Data, Design, Cloud and Engineering across various industries.

We can provide you with customized end-to-end solutions that drive business value.

Job Description

We are seeking a skilled

Data Security Specialist to help develop and implement data security controls, monitor data-related risks, support regulatory compliance, and partner with technology, cybersecurity, risk, legal, and business teams to safeguard sensitive and confidential information.

Responsibilities

• Develop, implement, and maintain data security policies, standards, procedures, and control frameworks.
• Identify and assess risks associated with sensitive, confidential, and regulated data.
• Support data classification, discovery, inventory, tagging, and data-loss-prevention initiatives.
• Implement and monitor controls that protect data throughout its lifecycle, including creation, use, sharing, storage, archival, and destruction.
• Partner with technology teams to secure data across on-premises, cloud, database, application, and endpoint environments.
• Support access governance activities, including least-privilege access, privileged access reviews, entitlement reviews, and segregation-of-duties controls.
• Monitor security events and investigate potential data exposure, unauthorized access, and policy violations.
• Support data security incident response, remediation, root-cause analysis, and post-incident improvement activities.
• Evaluate third-party and vendor data security practices and support related risk assessments.
• Contribute to security architecture reviews and the implementation of secure data flows and data-handling processes.
• Support compliance with applicable laws, regulations, and industry standards.
• Prepare security metrics, risk reports, audit evidence, and management presentations.
• Participate in internal and external audits, regulatory examinations, and control-testing activities.
• Promote data security awareness and provide guidance to business and technology stakeholders.

Required Skills & Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or a related field. Equivalent experience may be considered.
• 3–7 years of experience in data security, information security, cybersecurity, data governance, technology risk, or a related discipline.
• Working knowledge of data classification, data loss prevention, encryption, key management, access control, identity governance, data discovery, secure data transfer, retention, and deletion.
• Experience working with security, data governance, risk, or compliance frameworks.
• Familiarity with cloud security concepts and platforms such as

AWS, Microsoft Azure, or Google Cloud .

• Understanding of databases, APIs, enterprise applications, file systems, and data integration technologies.
• Experience supporting security assessments, control testing, audits, or risk reviews.
• Strong analytical, documentation, communication, and stakeholder-management skills.
• Ability to manage multiple priorities in a highly regulated, fast-paced global environment.

Preferred Skills

• Experience in investment banking, wealth management, asset management, financial services, or another highly regulated industry.
• Familiarity with

GDPR, CCPA/CPRA, GLBA, SOX, PCI DSS , or applicable local data-protection requirements.

• Experience with tools such as

Microsoft Purview, Symantec/Broadcom DLP, Forcepoint DLP, Big ID, Varonis, Sail Point, Cyber Ark, Splunk, or Service Now .

• Knowledge of
• NIST CSF, NIST 800-53, ISO 27001, CIS Controls , or

COBIT .

• Familiarity with privacy impact assessments, records of processing activities, and privacy-by-design principles.
• Experience with Python, SQL, Power Shell, security automation, reporting, or data analysis.
• Relevant certifications such as

CISSP, CISM, CRISC, CIPP, CDPSE, Security+ , or a cloud-security certification.

• 100% Medical Insurance premium for Employee will be paid by Synechron.
• Medical Insurance Premium for the dependents on residence visa will be paid on 50% - 50% copay policy of Synechron.
• Employment visa and residence visa cost will be paid by Synechron for employees and his/her dependents.
• Initial entry ticket will be paid by Synechron for employee and his/her dependents for movements from outside the UAE.
• 22 working days of annual leave and 15 sick leaves will be provided to employees as per UAE regulations.

Awards

2022: Voted in Top 25 Best Companies to Work for by the Business Intelligence Group

2021: Winner of the Gold Globee Award for Employer Excellence in Career Growth, Development & Training

• 2021: Synechron recognized with a Silver Level Award for COVID-19 Support Strategy
• 2020: Winner of the Team of the Year Award at the US Fin Tech Awards
• 2020: Synechron Fin Labs won a Gold Stevie Award at the Asia-Pacific Stevie Awards

We are proud to be an equal opportunity employer.

Our Diversity, Equity, and Inclusion (DEI) initiative, Same Difference, is committed to fostering an inclusive culture that promotes equality, diversity, and respect.

We encourage applicants from diverse backgrounds, races, ethnicities, religions, ages, marital statuses, genders, sexual orientations, and abilities to apply.

We offer flexible workplace arrangements, mentoring, internal mobility, and learning and development programs to support our global workforce.

Empowerment and collaboration are at the core of how we operate.

#J-18808-Ljbffr