Data Lead: Analytics, Governance & Security

xScion is seeking a Data Lead: Analytics, Governance & Security to work on an xScion project team with one of our clients. This candidate leads analytics enablement, the governance framework, and the security model for the Data Hub. The role ensures highly sensitive benefits and health data is governed, protected, and usable for OEB's priority reporting and compliance use cases – focusing on HIPAA, privacy, retention, and audit readiness. As a Data Lead, You Will: Define priority reporting and analytics use cases (360 participant view, pension calculations, compliance analytics, inactive population communications) and map them to data, security, and tooling requirements Establish the Data Hub governance framework: data classification, stewardship roles, approval workflows, retention rules, and incident/breach support aligned with OEB and Federal Reserve policies Map regulatory obligations (HIPAA, applicable state benefits laws) to concrete controls, policies, monitoring processes, and evidence expectations within the Data Hub operating model Recommend and oversee cataloging, lineage, and access-control approaches (Unity Catalog, AWS Glue Data Catalog, RBAC/ABAC) to support discoverability, traceability, and least‑privilege access Define fine‑grained security patterns: RBAC/ABAC, encryption, key management, logging, and monitoring for highly sensitive data Produce audit‑ready evaluation reports summarizing compliance posture, risks, mitigations, and supporting evidence for internal audits and external reviews Partner with Architecture/Ingestion lead and IV&V lead to ensure governance and security requirements are built into ingestion patterns, data models, and testing from the outset. To Be Successful, You Need: Permanent Residency or US Citizenship Bachelor's degree in Computer Science, Information Systems, Business IT Management or equivalent practical experience 7+ years in data governance, compliance, or information management with direct responsibility for governance framework delivery Deep working knowledge of HIPAA Privacy and Security Rules as applied to health and benefits data Experience building data governance frameworks: classification, stewardship, approval workflows, and retention policy Familiarity with cataloging and access‑control tooling – Unity Catalog, AWS Glue Data Catalog, Collibra, Alation, or equivalent Experience with RBAC/ABAC design and fine‑grained security controls for cloud data platforms Ability to produce audit‑ready compliance documentation: posture assessments, risk/mitigation evidence packages Experience mapping regulatory obligations (HIPAA, state‑level benefits law) to data platform controls and monitoring. Nice to Have: Prior work in Federal Reserve, OCC, FDIC, or other financial regulatory environments Experience with Databricks Unity Catalog or AWS Lake Formation for fine‑grained access control CIPP, CIPM, CISSP, or equivalent privacy/security certification Background in defined benefit or defined contribution plan compliance. Benefits Medical, dental, 401(k) match, flexible spending and more; up to 27 days off a year (including your birthday!), remote work opportunities, parental leave, wellness benefits and many other items that inspire balance and flexibility. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status. xScion takes affirmative action in support of its policy to employ and advance in employment individuals who are minorities, women, protected veterans and individuals with disabilities. #J-18808-Ljbffr xScion