Data Service Lead - Security

Basic Function

LyondellBasell has fully committed to achieving its vision as “The Chemical Company of the Future” and an industry leader in the areas of Sustainability and Customer Experience.  The Digital Enterprise that will act as the foundation for enabling this vision will be built upon three pillars: A modern and extensible technology architecture, an ERP backbone that supports new business models, and a team of talented technologists that are empowered to build innovative solutions and digital products. 
At the intersection of these pillars, the Data & Analytics Center of Excellence is building the data foundation and a catalog of data products, analytical applications, and enterprise services that give users across our company the tools, data, and guidance to generate insights. 
The Data Service Security Lead will be responsible for leading Data Security and SecDevOps Service of the Data and Analytics Platform ensuring that platform and data are secure and adhere to organizational and regulatory standards.

Roles & Responsibilities

•    Lead the design, implementation and maintenance of security in the data and analytics cloud platform including row and column level security, data encryption, data classification & masking.
•    Conduct periodic data security reviews/assessments and update security policies/setup per findings 
•    Engage with multiple teams both inside and outside the Data & Analytics CoE, such as the product teams, Enterprise Architecture team, Cyber Security etc. on the execution of data security, SecDevOps and other initiatives. 
•    Drive data and analytics security and DevOps strategy development and assist in setting functional policy and direction.
•    Implement and maintain Azure role-based access controls (Azure RBAC).
•    Scripting and automating security processes in Azure.
•    Translate data security regulations and technology standards into actionable functional and technical requirements.
•    Research and apply vulnerability remediation & recommendations for security and compliance.
•    Continuously evaluate new technologies, vendor products and services.
•    Maintain current knowledge of security trends, technologies and best practices
•    Communicate effectively with business stakeholders, project managers, IT Business Analysts, and Developers.
•    Provide project workgroup teams data security and DevOps guidance and awareness.
•    Report on metrics associated with the security of the data platform services and products.

Min. Qualifications

•    Bachelor’s degree in Computer Science, Information Systems, Engineering or equivalent experience in a relevant field.
•    10+ years of relevant work experience in the IT industry with 5+ years of expertise in data store technologies with a focus on data security.
•    3+ years of experience leading technical teams.
•    Hands on experience in implementing data security including row and column level in a relational database, data warehouse or BI tool
•    Deep knowledge of US and International data security & privacy laws and regulations like CCPA and GDPR.
•    Familiarity with PCI, SOX and other compliance standards.
•    Working knowledge and demonstrated experience with cloud service providers (Azure, Google, AWS) and cloud services (e.g. PaaS, IaaS, SaaS) and the ability to address the unique security consideration of secure cloud environment.
•    Experience in writing SQL queries, Stored Procedures, Views, and Functions 
•    Knowledge of enterprise ETL tools like Azure Data Factory, SSIS, Informatica or similar.
•    Understanding of data flows, data architecture, ETL and processing of structured and unstructured data
•    Technical background with understanding of database methodologies and various relational and NoSQL database technologies
•    Strong reporting skills for crafting reports and metrics on data security and classification
•    Proficient in DevOps and Agile concepts & development principle including continuous integration & continuous delivery (CI/CD).
•    Excellent leadership skills and the ability to troubleshoot problems quickly and efficiently in a diverse and challenging environment

Preferred Qualifications

•    Cloud Security Engineer Training & Certification with Microsoft Azure preferred.
•    Identity and Access management domain knowledge.
•    Successful track record of implementing data security, classification or governance programs.
•    3+ years’ of experience in Microsoft PaaS data services, but not limited to, such as Azure data factory, Azure data lake store, Azure function apps, Azure SQL/Data Warehouse. 
•    Experience of Reporting and Analytics tools such as Tableau, Power BI, and Alteryx
•    Experience with global enterprise environment or major consulting firm is a plus.
•    Compiling post-breach information for forensic analysis.
•    Hands on experience with data security tools like BigId, Immuta, Microsoft Purview or Okera.
•    Experience with CI/CD tools such as Azure DevOps, Jenkins, GitHub, Jira or Confluence.
•    Experience with Microsoft Azure security design patterns and practices

Competencies