Info Security Consultant

Responsible for supporting and advancing Key’s Information Control and Protection team responsibilities, including Data Retention and Protection program, eDiscovery/Litigation Support, and Insider Risk Management. This role partners with Legal, Compliance, Risk Management, Human Resources, Corporate Security, Technology, and business stakeholders to protect information assets, ensure regulatory compliance, and mitigate organizational risk., * Support the development, execution, and continuous improvement of Data Retention and Protection program, eDiscovery activities, and Insider Risk program.

• Develop and maintain policies, standards, procedures, and governance processes.
• Assess risks, identify control gaps, and recommend mitigation strategies.
• Administer records retention schedules, legal holds, information inventories, and destruction processes.
• Conduct eDiscovery activities, including data identification, preservation, collection, analysis, and production.
• Support litigation, regulatory, investigative, and audit requests in partnership with Legal and Compliance.
• Investigate potential insider risk events and recommend corrective actions.
• Administer and optimize information protection, eDiscovery, and insider risk technologies.
• Manage vendor relationships and support implementation of new tools and capabilities.
• Develop reports, metrics, presentations, and executive communications.
• Provide consulting support to business and technology initiatives.
• Serve as a subject matter expert and build strong partnerships across stakeholders.

The ideal candidate has experience in information security, information governance, records management, eDiscovery, insider risk, investigations, or information technology, along with strong analytical, communication, and relationship management skills., * Bachelor’s degree or equivalent experience.

• 3-5 years of experience in Information Security, Information Governance, Records Management, eDiscovery, Insider Risk, Risk Management, Investigations, or Information Technology.
• Knowledge of information security, records management, risk management, and data governance principles.
• Experience supporting eDiscovery, legal hold, investigative, or compliance activities.
• Strong analytical, problem-solving, and risk assessment skills.
• Excellent written, verbal, and presentation skills.
• Ability to manage multiple priorities and work independently.
• Strong collaboration and stakeholder management skills.
• Experience leading projects, initiatives, or workstreams., * Experience with insider risk, digital investigations, eDiscovery, or litigation support platforms.
• Experience working with Legal, Compliance, Human Resources, Corporate Security, or Risk Management teams.
• Knowledge of data retention, privacy, and regulatory compliance requirements.
• Experience with automation, scripting, or security administration.
• Relevant certifications such as CISSP, CISM, CRISC, GIAC, CEDS, or Information Governance/Records Management certifications.

This position is NOT eligible for employment visa sponsorship for non-U.S. citizens., Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com.

This position is eligible to earn a base salary in the range of $69,000.00 - $105,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.