Cyber Security Principal

Job Title: Security Analyst V

Location: 601 S. Tryon Street, Charlotte, NC 28202

NOTE: Onsite in Charlotte - Hybrid model - onsite 3 days a week. **Cyber Security Principal - ** Microsoft Copilot; ** Jira/Confluence; ** Fluent in Agile; **PowerBI; **Project & Stakeholder Mgmt; **Strong understanding of Data Protection and Encryption. **Demonstrated ability to build strong relationships; ** Critical thinking. **Attention to detail/detail oriented/organized. **Self-starter able to get things done take the ball and run with it. **Experience working with senior level leaders executive presence; Must have excellent communication skills - written and verbal; team player - work well with others collaborative, able to challenge respectfully. ** CISSP/ CISM/CCSP preferred but not required. **Provide location and interview availability. **3 interviews 30 to 45 minutes - at least 1 will be onsite.

Job Description

Cyber Security Principal Analyst

Position Summary:

The Cyber Security Principal Analyst is a strategic leader in the data security program. This role drives the development and execution of enterprise-wide data protection strategies. By collaborating with business and technology stakeholders, this role ensures that critical data is secured, regulatory requirements are met, and emerging risks are proactively addressed.

Key Responsibilities:

Lead Enterprise Data Protection Strategy

Define and execute data security plans aligned with business objectives and risk priorities.

Establish data classification, loss prevention, and encryption controls across platforms.

Serve as a thought partner to senior leaders and guide the adoption of best practices.

Govern Regulatory and Policy Compliance

Interpret privacy laws and industry regulations into actionable security controls.

Align security efforts to frameworks such as NIST CSF, ISO 27001, and CIS.

Support internal and external audits by maintaining evidence of the effectiveness of controls.

Enhance Data Visibility and Risk Posture

Lead initiatives to discover and classify sensitive data across the enterprise.

Deploy monitoring solutions to detect anomalies, unauthorized access, and data misuse.

Translate findings into prioritized remediation actions and risk-reduction plans.

Drive Cross-Functional Collaboration

Influence and enable data owners, technology teams, and business units to adopt security practices.

Deliver clear communications and training to improve awareness and accountability.

Participate in steering committees or working groups on enterprise security initiatives.

Support Innovation and Technical Excellence

Use analytics, Python, or SQL to uncover behavior patterns and inform controls.

Evaluate new security technologies and oversee their implementation.

Guide security integration into cloud (AWS, Azure), SaaS (Salesforce, M365), and database environments.

Additional Responsibilities:

Evaluate third-party vendors and their ability to meet security standards.

Act as a technical advisor during incident response and investigations.

Contribute to security tool rationalization and enterprise architecture discussions.

Minimum Qualifications:

Bachelor s degree in computer science, Cybersecurity, or a related field

8+ years of experience in data security, cybersecurity, or cloud security roles

Proven expertise in access controls, encryption, and regulatory alignment

Experience with cloud (AWS, Azure) and SaaS (M365, Salesforce) platforms

Familiarity with tools such as BigID, Microsoft Purview, Splunk, or ALTR

Excellent communication, analysis, and stakeholder engagement skills

Preferred Qualifications:

Master s degree in Cybersecurity or related discipline

Certifications: CISSP, CCSP, CISM, or equivalent

Experience in highly regulated sectors such as financial services

Familiarity with data governance tools (e.g., Collibra, Alation)

Exposure to machine learning or user behavior analytics in a security context

Success Measures:

Reduction of high-risk data exposure within 6 12 months

Timely resolution of security control gaps and audit findings

Improved adoption of classification and DLP tools by business units

Positive stakeholder feedback on collaboration and responsiveness

Demonstrated leadership in cross-functional projects or steering groups