Data Security Analyst Jobs
Data Security Analyst jobs are open across financial services, healthcare, government, and technology, covering specializations in threat analysis, vulnerability management, and security compliance, from entry-level to senior and lead roles. See the openings below and apply to the ones that match your experience.
Find Data Security Analyst JobsOverview
Showing 5 of 18+ Data Security Analyst jobs
POSITION SUMMARY:
Targa is seeking a hands-on Data Security Sr. Analyst to own the security and access model for the enterprise data and analytics platform. This role decides who can see and use which data, puts those decisions into enforced controls, and makes sure the platform stays compliant as more people, more data sources, and more AI use it.
This Sr. Analyst owns data security policy and Microsoft Purview governance for the platform — classification, sensitivity labels, access policies, and audit — across Microsoft Fabric and Databricks, working with the Platform / Fabric Administrator, who runs Purview day to day, and with enterprise cybersecurity. The scope covers enterprise, OT, and third-party data, including privacy-sensitive HR and financial data. As AI assistants and agents can find and combine data faster than any person, this role is central to using AI safely: making sure every person, assistant, and agent sees only what it should, and that Targa can prove it.
JOB FUNCTIONS AND KEY RESPONSIBILITIES:
Design and maintain the data access model across workspaces, data products, and layers, based on roles and least privilege.
Define row-level, object-level, and column-level security patterns for sensitive data across Microsoft Fabric, Power BI, and Databricks (Unity Catalog).
Own access requests, approvals, and periodic access reviews for the data platform, moving from manual, workspace-by-workspace access toward automated, policy-based access at scale.
Govern identities and credentials for non-human access, including service principals, managed identities, gateway credentials, and secrets in Azure Key Vault, with defined scope, rotation, and audit.
Define the data classification scheme and sensitivity labels and how they are applied; use AI-assisted, policy-based classification to label data at scale, setting the rules and validating the results.
Set access policies and data loss prevention controls in Purview, implemented with the Platform / Fabric Administrator.
Define encryption, key management, and network isolation standards for the data platform, including encryption at rest and in transit, private endpoints, and Fabric private links.
Refine and expand the guardrails that let citizen developers find and use data safely.
Define how Copilot, AI assistants, and AI agents are allowed to access data; ensure permissions and labels are accurate enough that AI does not overshare sensitive data.
Define identity, scope, and audit trail requirements for AI agents acting on behalf of people or on their own.
Implement AI-specific data security controls, such as Purview Data Security Posture Management for AI, to monitor what data flows into prompts and responses.
Secure OT data flows from the industrial network into the platform, partnering with the Data Ingestion Lead (Enterprise & OT) and OT cybersecurity on IT/OT boundaries, approved connectivity, and data diodes or brokers; work with the owners of TSA pipeline security directive compliance on how OT data leaves the control network.
Own security of inbound third-party data from customers, suppliers, and data providers, and of outbound data sharing and external guest access, including the data-sharing and contract terms that govern both.
Define handling standards for privacy-sensitive data, including PII, employee, and payroll data from systems such as UKG and financial data from Oracle, and ensure compliance with applicable privacy requirements.
Own data platform controls that support SOX and other compliance requirements, including evidence for audits.
Support retention, legal hold, and eDiscovery requirements for platform data with Legal and Records Management.
Monitor access and activity for unusual or risky behavior using AI-based detection, and own the data-exposure incident playbook, coordinating response with the cybersecurity team.
Write and maintain data security standards and procedures for the platform.
Work with enterprise cybersecurity and identity teams on identity, threat, and incident response.
Guide Data Management and Data Solutions on secure design for pipelines, data products, and semantic models.
Work with data owners to classify data and approve access appropriately.
Establish and report metrics for share of platform data classified and labeled, access reviews completed on schedule with no material audit findings, access requests handled within agreed time and policy, data security incidents and oversharing exposures identified and closed, and oversharing risks remediated before Copilot or agent rollout to each data domain.
Other duties as assigned.
MINIMUM ESSENTIAL QUALIFICATIONS:
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; equivalent relevant experience will be considered.
5+ years in information security, identity and access management, or data platform roles, including at least 3 years focused on data security.
Hands-on experience with Microsoft Purview (information protection, data classification, sensitivity labels, DLP, or data governance).
Strong knowledge of Entra ID (Azure AD), role-based access control, security groups, and conditional access.
Experience managing non-human identities, including service principals, managed identities, and secrets management (Azure Key Vault).
Experience implementing row-level and object-level security in Power BI, Fabric, or similar platforms.
Experience supporting SOX or similar compliance controls, access reviews, and audit evidence.
Ability to turn policy into practical controls and explain them clearly to technical and business audiences.
Strong communication, problem-solving, and stakeholder-management skills.
Regular and reliable attendance.
PREFERRED QUALIFICATIONS:
Experience securing Microsoft Fabric or Azure data platforms, including private endpoints and network isolation.
Experience with Databricks Unity Catalog security.
Experience governing Copilot or other AI tools in an enterprise, including identity and access for AI agents.
Experience with Defender for Cloud Apps or Purview Data Security Posture Management for AI.
Experience with AI risk frameworks and responsible AI controls.
Experience with privacy requirements and protecting PII and HR data.
Familiarity with OT/IT security concerns in industrial environments, including TSA pipeline security directives.
Experience in energy, midstream, or other regulated, asset-intensive industries.
Security certifications such as CISSP, CCSP, Microsoft SC-401 / Information Protection Administrator, or Azure Security Engineer.
EQUAL EMPLOYMENT OPPORTUNITY:
Targa Resources provides equal employment opportunities based on merit, experience, and other work-related criteria and without regard to race, color, ethnicity, religion, national origin, sex, age, pregnancy, disability, veteran status, or any other status protected by applicable law. We also strive to provide reasonable accommodation to employees’ beliefs and practices that do not conflict with Targa’s policies and applicable law. We value the unique contributions that every employee brings to their role with Targa.
POSITION SUMMARY:
Targa is seeking a hands-on Data Security Sr. Analyst to own the security and access model for the enterprise data and analytics platform. This role decides who can see and use which data, puts those decisions into enforced controls, and makes sure the platform stays compliant as more people, more data sources, and more AI use it.
This Sr. Analyst owns data security policy and Microsoft Purview governance for the platform — classification, sensitivity labels, access policies, and audit — across Microsoft Fabric and Databricks, working with the Platform / Fabric Administrator, who runs Purview day to day, and with enterprise cybersecurity. The scope covers enterprise, OT, and third-party data, including privacy-sensitive HR and financial data. As AI assistants and agents can find and combine data faster than any person, this role is central to using AI safely: making sure every person, assistant, and agent sees only what it should, and that Targa can prove it.
JOB FUNCTIONS AND KEY RESPONSIBILITIES:
Design and maintain the data access model across workspaces, data products, and layers, based on roles and least privilege.
Define row-level, object-level, and column-level security patterns for sensitive data across Microsoft Fabric, Power BI, and Databricks (Unity Catalog).
Own access requests, approvals, and periodic access reviews for the data platform, moving from manual, workspace-by-workspace access toward automated, policy-based access at scale.
Govern identities and credentials for non-human access, including service principals, managed identities, gateway credentials, and secrets in Azure Key Vault, with defined scope, rotation, and audit.
Define the data classification scheme and sensitivity labels and how they are applied; use AI-assisted, policy-based classification to label data at scale, setting the rules and validating the results.
Set access policies and data loss prevention controls in Purview, implemented with the Platform / Fabric Administrator.
Define encryption, key management, and network isolation standards for the data platform, including encryption at rest and in transit, private endpoints, and Fabric private links.
Refine and expand the guardrails that let citizen developers find and use data safely.
Define how Copilot, AI assistants, and AI agents are allowed to access data; ensure permissions and labels are accurate enough that AI does not overshare sensitive data.
Define identity, scope, and audit trail requirements for AI agents acting on behalf of people or on their own.
Implement AI-specific data security controls, such as Purview Data Security Posture Management for AI, to monitor what data flows into prompts and responses.
Secure OT data flows from the industrial network into the platform, partnering with the Data Ingestion Lead (Enterprise & OT) and OT cybersecurity on IT/OT boundaries, approved connectivity, and data diodes or brokers; work with the owners of TSA pipeline security directive compliance on how OT data leaves the control network.
Own security of inbound third-party data from customers, suppliers, and data providers, and of outbound data sharing and external guest access, including the data-sharing and contract terms that govern both.
Define handling standards for privacy-sensitive data, including PII, employee, and payroll data from systems such as UKG and financial data from Oracle, and ensure compliance with applicable privacy requirements.
Own data platform controls that support SOX and other compliance requirements, including evidence for audits.
Support retention, legal hold, and eDiscovery requirements for platform data with Legal and Records Management.
Monitor access and activity for unusual or risky behavior using AI-based detection, and own the data-exposure incident playbook, coordinating response with the cybersecurity team.
Write and maintain data security standards and procedures for the platform.
Work with enterprise cybersecurity and identity teams on identity, threat, and incident response.
Guide Data Management and Data Solutions on secure design for pipelines, data products, and semantic models.
Work with data owners to classify data and approve access appropriately.
Establish and report metrics for share of platform data classified and labeled, access reviews completed on schedule with no material audit findings, access requests handled within agreed time and policy, data security incidents and oversharing exposures identified and closed, and oversharing risks remediated before Copilot or agent rollout to each data domain.
Other duties as assigned.
MINIMUM ESSENTIAL QUALIFICATIONS:
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; equivalent relevant experience will be considered.
5+ years in information security, identity and access management, or data platform roles, including at least 3 years focused on data security.
Hands-on experience with Microsoft Purview (information protection, data classification, sensitivity labels, DLP, or data governance).
Strong knowledge of Entra ID (Azure AD), role-based access control, security groups, and conditional access.
Experience managing non-human identities, including service principals, managed identities, and secrets management (Azure Key Vault).
Experience implementing row-level and object-level security in Power BI, Fabric, or similar platforms.
Experience supporting SOX or similar compliance controls, access reviews, and audit evidence.
Ability to turn policy into practical controls and explain them clearly to technical and business audiences.
Strong communication, problem-solving, and stakeholder-management skills.
Regular and reliable attendance.
PREFERRED QUALIFICATIONS:
Experience securing Microsoft Fabric or Azure data platforms, including private endpoints and network isolation.
Experience with Databricks Unity Catalog security.
Experience governing Copilot or other AI tools in an enterprise, including identity and access for AI agents.
Experience with Defender for Cloud Apps or Purview Data Security Posture Management for AI.
Experience with AI risk frameworks and responsible AI controls.
Experience with privacy requirements and protecting PII and HR data.
Familiarity with OT/IT security concerns in industrial environments, including TSA pipeline security directives.
Experience in energy, midstream, or other regulated, asset-intensive industries.
Security certifications such as CISSP, CCSP, Microsoft SC-401 / Information Protection Administrator, or Azure Security Engineer.
EQUAL EMPLOYMENT OPPORTUNITY:
Targa Resources provides equal employment opportunities based on merit, experience, and other work-related criteria and without regard to race, color, ethnicity, religion, national origin, sex, age, pregnancy, disability, veteran status, or any other status protected by applicable law. We also strive to provide reasonable accommodation to employees’ beliefs and practices that do not conflict with Targa’s policies and applicable law. We value the unique contributions that every employee brings to their role with Targa.
Data Security Analyst Jobs by Experience Level
See All 18 Data Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Data Security Analyst JobsData Security Analyst Job Market
Who's Hiring
Top Industries Hiring
- Insurance
What Employers Look For
The qualifications that appear most often in data security analyst jobs.
- Bachelor's degree in computer science, information security, or a related field
- Experience with SIEM platforms such as Splunk, IBM QRadar, or Microsoft Sentinel
- Knowledge of security frameworks including NIST, ISO 27001, and CIS Controls
- One or more certifications such as Security+, CISSP, CEH, or CISM
- Proficiency in vulnerability assessment tools such as Tenable Nessus or Qualys
- Familiarity with regulatory compliance requirements including HIPAA, PCI DSS, or SOX
Tips for Your Data Security Analyst Job Search
Tailor your resume to each listing
Data security analyst job descriptions vary widely between industries. A healthcare employer emphasizes HIPAA compliance experience while a fintech firm wants familiarity with PCI DSS. Pull the exact framework names from each posting and mirror them in your resume's skills and accomplishments sections.
Lead with certifications above your summary
Certifications like Security+, CISSP, CEH, and CISM are eliminators at the screening stage. Place them directly beneath your name and contact info so a recruiter scanning for 10 seconds doesn't miss them, especially if your degree field is not cybersecurity.
Apply early to roles that fit
Migrate Mate lists data security analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Demonstrate hands-on tool experience clearly
Job postings for data security analysts frequently require SIEM platforms, vulnerability scanners, and endpoint detection tools. Name the specific tools you've used, such as Splunk, Tenable, or CrowdStrike, and describe the context, not just the fact that you used them.
Prepare for scenario-based technical interviews
Interviewers commonly walk candidates through a live incident scenario or ask how you'd triage a phishing alert or a failed login spike. Practice walking through your detection, escalation, and remediation logic out loud before your interview, not just reviewing definitions.
Negotiate by anchoring to scope and impact
When discussing compensation, tie your ask to the scope of data you've protected, the number of endpoints you've monitored, or the compliance frameworks you've maintained. Quantified operational responsibility carries more weight in this field than years of experience alone.
Data Security Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most data security analysts?
California Institute of Technology, Amtrak, and GovCIO are hiring the most data security analysts right now, with openings concentrated in Texas, District of Columbia, and Maine, based on current listings on Migrate Mate as of November 2026. Financial services, healthcare systems, and federal contractors consistently account for a large share of active postings.
How many data security analyst jobs are remote?
About 86% of data security analyst openings are fully remote or hybrid as of November 2026, though the share varies significantly by industry and seniority. Roles focused on cloud security monitoring, threat intelligence analysis, and compliance auditing tend to be the most remote-eligible, while positions requiring on-site access to secure infrastructure or classified environments are almost always in-person.
How do you become a data security analyst?
Start with a bachelor's degree in computer science, information systems, or cybersecurity, or build an equivalent foundation through a reputable bootcamp and self-study. Earn an entry-level certification like Security+ to signal baseline competency. Gain hands-on experience through internships, home labs, or IT support roles that expose you to network monitoring and incident response before moving into a dedicated security analyst position.
How do you get hired as a data security analyst with little experience?
Focus on roles titled junior security analyst, IT security associate, or SOC tier-one analyst, which are designed for candidates still building their portfolio. Build a home lab using free tools to simulate threat detection and document what you learned. A Security+ certification combined with demonstrable hands-on projects consistently moves entry-level candidates past initial screening, even without prior professional security titles on their resume.
What does the data security analyst interview process look like?
Most hiring processes include a recruiter screening call, a technical phone interview covering security concepts and tool familiarity, and one or two panel rounds that include scenario-based questions. Some employers add a take-home exercise asking you to analyze a mock incident log or assess a sample network configuration. Final rounds typically involve the security team lead and sometimes a cross-functional stakeholder from IT or compliance.
Where can I find and apply to data security analyst jobs?
You can find and apply to data security analyst jobs on Migrate Mate, which lists current openings from across the United States. Search for roles that match your specialization and experience level, then apply directly to each listing that fits. New positions are added regularly, so checking back frequently gives you access to openings before they fill.
See All 18 Data Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Data Security Analyst Jobs