Job description

Optomi, in partnership with a leading provider in the Entertainment industry is seeking a Sr. Data Security Specialist with deep expertise in Snowflake Security to join their team. In this role, you will be responsible for designing, implementing, and maintaining robust data security controls that safeguard sensitive data across our Snowflake environment and integrated tools. You will collaborate closely with Disney Content Security team, data engineers, architects, governance, and privacy teams to ensure the platform meets all required security criteria, aligns with compliance needs, and supports secure adoption of AI/ML workloads. Key Responsibilities: • Design, implement, and manage Snowflake security controls, including RBAC, data masking, row/column-level security, and object tagging for access governance. • Define and enforce least-privilege access models aligned with business requirements, compliance needs, and governance policies. • Advise on Snowflake configuration best practices (network policies, encryption, failover, account/warehouse management, access patterns) to protect sensitive and regulated data. • Partner with engineering teams to secure AI/ML workloads, vector databases, embeddings, and Cortex AI features within Snowflake. • Liaise with the Disney Security team to ensure the platform meets enterprise-wide security standards and audit requirements • Analyze assessment findings, document risks, and collaborate with vendors on mitigation plans and timelines. Experience: • Bachelor’s degree in Computer Science, Information Security, Data Engineering, or related field (or equivalent experience). • 5+ years of experience in information security, with at least 2 years working directly with Snowflake. • Strong understanding of Snowflake RBAC, masking policies, external tokens, object tagging, data classification, and access governance. • Experience securing AI/ML pipelines, vector databases, embeddings, or Snowflake Cortex features. • Familiarity with IAM platforms (Okta, Azure AD, Ping, etc.), SSO, MFA, and SCIM integration. • Proficiency in SQL, Python (or another major programming language), and automation for security controls. • Familiarity with data governance frameworks, privacy regulations, and compliance requirements. • Experience with cloud platforms (AWS, GCP, Azure) and securing data warehouses in multi-cloud environments. • Strong written and verbal communication, with the ability to explain complex security concepts to technical and non-technical stakeholders. Nice to have: • Certifications such as SnowPro Advanced: Data Protection and Security, CISSP, CISM, or CCSK. • Experience with Immuta, SecuPi, or other data access governance tools. Knowledge of data lineage, cataloging, and classification tools (e.g., Alation, BigID). • Experience in large-scale enterprise or regulated industries (media, finance, healthcare, etc.). • Familiarity with agile/scrum methodologies and collaborative ways of working.

Requirements