• 2–4 years of experience in product management, business analysis, data governance, access controls, or risk

and controls — ideally in a data-heavy environment.

• Working understanding of Role-Based (RBAC) and Attribute-Based (ABAC) access control — what they are,

when each applies, and how policies translate into platform configurations.

• Familiarity with enterprise data platforms and fair understanding of SQL.

• Basic understanding of data classification — sensitivity tiers, tagging, and how classification drives access

policy. Comfortable working with data dictionaries and business glossaries.

• Able to read data queries and table definitions well enough to review access configurations and identify

obvious entitlement gaps — deep technical expertise is not required.

• Proven ability to produce precise, actionable requirements — user stories, process flows, acceptance criteria

— that engineering teams can build from without back-and-forth.

Preferred Qualifications, Capabilities, and Skills

• Experience in financial services, healthcare, or another highly regulated environment.

• Exposure to an enterprise data or analytics platform — how access is structured, how users and groups are

provisioned, and how data consumption is governed.

• Familiarity with entitlement or governance tools such as Immuta, Collibra, or equivalent, even in a contributor

or analyst capacity.

• Comfort reviewing technical specifications and participating in testing alongside engineering teams.

• Willingness to learn new concepts with a problem solving mindset.