Data Lead: Analytics, Governance & Security

Role Description

xScion is seeking a Data Lead: Analytics, Governance & Security to work on an xScion project team with one of our clients. This candidate leads analytics enablement, the governance framework, and the security model for the Data Hub. Ensures highly sensitive benefits and health data is governed, protected, and usable for OEB's priority reporting and compliance use cases — with particular focus on HIPAA, privacy, retention, and audit readiness.

As a Data Lead, You Will:

• Define priority reporting and analytics use cases (360 participant view, pension calculations, compliance analytics, inactive population communications) and map them to data, security, and tooling requirements.
• Establish the Data Hub governance framework: data classification, stewardship roles, approval workflows, retention rules, and incident/breach support aligned with OEB and Federal Reserve policies.
• Map regulatory obligations (HIPAA, applicable state benefits laws) to concrete controls, policies, monitoring processes, and evidence expectations within the Data Hub operating model.
• Recommend and oversee cataloging, lineage, and access-control approaches (Unity Catalog, AWS Glue Data Catalog, RBAC/ABAC) to support discoverability, traceability, and least-privilege access.
• Define fine-grained security patterns: RBAC/ABAC, encryption, key management, logging, and monitoring for highly sensitive data.
• Produce audit-ready evaluation reports summarizing compliance posture, risks, mitigations, and supporting evidence for internal audits and external reviews.
• Partner with Architecture/Ingestion lead and IV&V lead to ensure governance and security requirements are built into ingestion patterns, data models, and testing from the outset.

Qualifications

• Permanent Residency or US Citizenship.
• Bachelor's degree in Computer Science, Information Systems, Business IT Management or equivalent practical experience.
• 7+ years in data governance, compliance, or information management with direct responsibility for governance framework delivery.
• Deep working knowledge of HIPAA Privacy and Security Rules as applied to health and benefits data.
• Experience building data governance frameworks: classification, stewardship, approval workflows, and retention policy.
• Familiarity with cataloging and access-control tooling — Unity Catalog, AWS Glue Data Catalog, Collibra, Alation, or equivalent.
• Experience with RBAC/ABAC design and fine-grained security controls for cloud data platforms.
• Ability to produce audit-ready compliance documentation: posture assessments, risk/mitigation evidence packages.
• Experience mapping regulatory obligations (HIPAA, state-level benefits law) to data platform controls and monitoring.

Nice to Have

• Prior work in Federal Reserve, OCC, FDIC, or other financial regulatory environments.
• Experience with Databricks Unity Catalog or AWS Lake Formation for fine-grained access control.
• CIPP, CIPM, CISSP, or equivalent privacy/security certification.
• Background in defined benefit or defined contribution plan compliance.

Benefits

• Medical, dental, 401(k) match, flexible spending and more.
• Up to 27 days off a year (including your birthday!).
• Remote work opportunities.
• Parental leave.
• Wellness benefits and many other things that inspire balance and flexibility.