Bi Security And Access Management Specialist

Required Qualifications
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline; equivalent relevant education and experience may be considered where permitted by the Member.
Experience securing enterprise BI, analytics, database, data warehouse, cloud, or application environments.
Practical experience with identity and access management, RBAC, least privilege, SSO, MFA, access reviews, and audit logging.
Knowledge of security risk management, privacy principles, data protection, control assessment, and secure system configuration.
Ability to interpret Member security policies and translate them into practical technical controls and documented procedures.

Technical Skills
Identity platforms and directories such as Microsoft Entra ID, Active Directory, Okta, or equivalent.
BI security controls for Microsoft Power BI, Tableau, Qlik, or other analytics/reporting platforms.
Database and data platform security across SQL Server, Oracle, cloud data services, data warehouses, and data lakes.
Role-based, row-level, and column-level security; workspace and dataset permissions; data classification and controlled sharing.
Security monitoring, audit logging, configuration review, and vulnerability/risk remediation processes.
Cloud security concepts across Azure, AWS, Google Cloud, and hybrid environments.
Familiarity with frameworks and requirements such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, FISMA, or other applicable Member standards, as relevant to the engagement.

Government and Education Experience
Experience supporting government agencies and education institutions is preferred. Familiarity with public-sector security governance and privacy requirements is beneficial, including protection of student information and awareness of FERPA where applicable, as well as employee, citizen, financial, health, or other sensitive information handled by Member systems. Specific regulatory obligations will be determined by the applicable Member and project.

Certifications
Relevant certifications may include CISSP, CISM, CISA, Security+, CCSP, Microsoft identity/security certifications, AWS Security Specialty, or other recognized cybersecurity and identity/access management credentials. Certifications should be current and relevant to the assigned responsibilities.

Core Competencies
Security-minded judgment; attention to detail; analytical assessment; discretion and confidentiality; risk-based decision-making; documentation; communication; collaboration; problem-solving; and the ability to balance protection with appropriate business access.