How are others securing down sensitive data

We want to secure down sensitive data like bank accounts and tax id from users being able to see these fields along with any SQL or batch jobs that would fetch this information.  If we have a job that needs to update the fields we want it to be able to do this without erroring out because of security.  How are others handling this sensitive data