InfoSec Management & Compliance Lead

The InfoSec Management & Compliance lead is responsible for defining and enforcing the security posture of the enterprise data lakehouse platform. This role owns the intersection of cybersecurity, data privacy, and regulatory compliance, ensuring that data assets are protected at rest, in transit, and in use.  

KEY RESPONSIBILITIES  

▸  Define and implement the data security framework for the lakehouse, including RBAC, ABAC, and column/row-level security  

▸  Lead compliance programs for applicable regulations: GDPR, CCPA, HIPAA, SOC 2, PCI-DSS  

▸  Conduct data risk assessments and threat modeling for platform components and data pipelines  

▸  Partner with platform teams to ensure security controls are embedded in CI/CD and data workflows  

▸  Manage vulnerability assessments, penetration testing, and audit response for the lakehouse environment  

▸  Oversee encryption standards for data at rest and in transit across cloud and on-prem storage  

▸  Develop and maintain data classification policies and enforce tagging standards  

▸  Respond to security incidents, conduct root cause analysis, and drive remediation  

▸  Maintain compliance documentation, evidence collection, and audit artifacts  

▸  Train engineering and operations teams on security policies and secure data handling practices  

REQUIRED QUALIFICATIONS  

▸  8+ years in information security, with 3+ years in data or cloud platform security  

▸  Deep knowledge of cloud security services: AWS IAM/KMS, Azure Purview/Defender, GCP Security Command Center  

▸  Hands-on experience with Unity Catalog (Databricks), Snowflake RBAC, or equivalent lakehouse security layers  

▸  Proven track record managing regulatory compliance programs (SOC 2, GDPR, HIPAA)  

▸  Strong understanding of NIST, CIS, and ISO 27001 security frameworks  

▸  Experience with SIEM tools, DLP solutions, and security monitoring platforms  

▸  Excellent communication skills for translating security risks to executive and business stakeholders  

▸  Bachelor's degree in Cybersecurity, Information Systems, or related field  

PREFERRED QUALIFICATIONS  

▸  CISSP, CISM, CISA, or CCSP certification strongly preferred  

▸  Experience with zero trust architecture and data fabric security models  

▸  Familiarity with AI/ML model security and responsible AI governance  

*ADDITIONAL INFORMATION
 
Please note that this is a talent pipeline in anticipation of future needs. Although we might not have an immediate opening for this role, we are likely to be hiring soon as our team is constantly growing and looking for talented people.
Qualified applicants will be invited to take part in the recruitment process and meet the Hiring Team. If successful, they will be placed in the talent pool and contacted as soon as an open position arises.

This position is open only to candidates who are currently based in Hungary and have the legal right to live and work in the country. Only candidates who meet these requirements and are shortlisted for the role will be contacted regarding next steps in the recruitment process.

What Dynata Can Offer You

In addition to a competitive salary, we offer a comprehensive range of benefits tailored to each country. Our benefits are designed to support your well-being and help you achieve a healthy work-life balance.