Apply on Employer Site

City of Savannah · 1 week ago

Data Security & Governance Analyst

Savannah, GA

Full-time

Onsite

Mid, Senior Level

$76K/yr - $76K/yr

4+ years exp

The City of Savannah is seeking a highly skilled Data Security and Governance Analyst to serve as a key architect of the City’s data protection, compliance, and governance framework. This role is critical to safeguarding City data assets while enabling secure, compliant, and responsible use of emerging technologies.

Business DevelopmentCommunitiesGovernmentPublic Safety

Responsibilities

Design and implement Microsoft Purview Information Protection policies to classify and label data (e.g., Public, Confidential, Restricted)

Establish and maintain sensitivity labels, retention policies, and data classification schemas for Copilot and broader M365 usage

Define Copilot guardrails, ensuring that AI-generated content does not expose unauthorized data

Monitor data access patterns and manage data access controls

Investigate anomalies using tools such as Purview Audit and Microsoft Defender for Cloud Apps

Implement Data Loss Prevention (DLP) policies to prevent oversharing of sensitive information internally and externally

Manage compliance portals, configure Microsoft Purview roles and permissions, and coordinate with security teams for ongoing audits

Provide documentation, training, and support to ensure department-wide adoption of best practices for AI governance

Stay current with Microsoft Purview roadmap and evolving features related to AI and data security

Identifies, assesses and mitigates risks relate to data security and governance and works with ITS Security Team to access and remediate potential data breaches and unauthorized access

Implement processes and controls to ensure data accuracy, completeness and consistency

Collaborates with stakeholders throughout the CoS to ensure effective data governance practices and enforcement

Performs other related duties and responsibilities as required

Qualification

Microsoft PurviewData Loss PreventionInformation ProtectionData Governance FrameworksMicrosoft 365 Compliance ToolsNIST Compliance StandardsHIPAA Compliance StandardsZero-Trust SecurityWork Management SkillsMicrosoft Certified SC-400Microsoft Certified Cybersecurity Architect ExpertCybersecurity PrinciplesInterpersonal SkillsProject Management Concepts

Required

Bachelor's degree from an accredited college or university and/or four (5) years of professional Data Security and Governance experience; or any equivalent combination of education, training and experience provides the requisite knowledge, skills and abilities

3–5 years of experience administering Microsoft 365 compliance and security tools

Proven experience with Microsoft Purview, Information Protection, and Data Loss Prevention

Familiarity with Microsoft Copilot, its data architecture, and how it interfaces with M365 workloads

Strong understanding of data governance frameworks, zero-trust security, and least-privilege access models

Experience with NIST, CJIS, and HIPAA data compliance standards

Knowledge of relevant regulations and industry standards

Strong understanding of data security and governance principles and practices

Good interpersonal skills with department office staff

Work management skills related to managing fast-paced working environments

Excellent verbal and written communication skills

Strong understanding of Cybersecurity and data management principles