Cyber Security Principal Analyst

Job Description

***C2C and Sponsorship Agreements are not available***

The Cyber Security Principal Analyst is a strategic leader in the data security program. This role drives the development and execution of enterprise-wide data protection strategies. By collaborating with business and technology stakeholders, this role ensures that critical data is secured, regulatory requirements are met, and emerging risks are proactively addressed.

Key Responsibilities

Lead Enterprise Data Protection Strategy

· Define and execute data security plans aligned with business objectives and risk priorities.

· Establish data classification, loss prevention, and encryption controls across platforms.

· Serve as a thought partner to senior leaders and guide the adoption of best practices.

Govern Regulatory and Policy Compliance

· Interpret privacy laws and industry regulations into actionable security controls.

· Align security efforts to frameworks such as NIST CSF, ISO 27001, and CIS.

· Support internal and external audits by maintaining evidence of the effectiveness of controls.

Enhance Data Visibility and Risk Posture

· Lead initiatives to discover and classify sensitive data across the enterprise.

· Deploy monitoring solutions to detect anomalies, unauthorized access, and data misuse.

· Translate findings into prioritized remediation actions and risk-reduction plans.

Drive Cross-Functional Collaboration

· Influence and enable data owners, technology teams, and business units to adopt security practices.

· Deliver clear communications and training to improve awareness and accountability.

· Participate in steering committees or working groups on enterprise security initiatives.

Support Innovation and Technical Excellence

· Use analytics, Python, or SQL to uncover behavior patterns and inform controls.

· Evaluate new security technologies and oversee their implementation.

· Guide security integration into cloud (AWS, Azure), SaaS (Salesforce, M365), and database environments.

Additional Responsibilities

· Evaluate third-party vendors and their ability to meet security standards.

· Act as a technical advisor during incident response and investigations.

· Contribute to security tool rationalization and enterprise architecture discussions.

Qualifications

· Bachelor’s degree in computer science, Cybersecurity, or a related field

· 8+ years of experience in data security, cybersecurity, or cloud security roles

· Proven expertise in access controls, encryption, and regulatory alignment

· - Experience with cloud (AWS, Azure) and SaaS (M365, Salesforce) platforms

· - Familiarity with tools such as BigID, Microsoft Purview, Splunk, or ALTR

· - Excellent communication, analysis, and stakeholder engagement skills

Preferred Qualifications

· Master’s degree in Cybersecurity or related discipline

· Certifications: CISSP, CCSP, CISM, or equivalent

· Experience in highly regulated sectors such as financial services

· Familiarity with data governance tools (e.g., Collibra, Alation)

· Exposure to machine learning or user behavior analytics in a security context

Success Measures

- Reduction of high-risk data exposure within 6–12 months

- Timely resolution of security control gaps and audit findings

- Improved adoption of classification and DLP tools by business units

- Positive stakeholder feedback on collaboration and responsiveness

- Demonstrated leadership in cross-functional projects or steering groupsCompany Description

StoneLaurel is a management consulting firm with the capabilities of a large provider and the personal touch of a boutique partner. Headquartered in Charlotte, NC, we’ve been moving our clients’ business forward for more than 20 years.

While our engagements have taken us around the globe, working with some of the largest Fortune 500 companies, our focus has always been on being the best, not the biggest.

We believe that trust matters and relationships are the foundation of good business. We put people first with flexible methodologies, client focus, and forward-thinking. Our seasoned team applies deep industry knowledge to create practical solutions.