Our client is a well known brand with a fantastic reputation across their industry. They are seeking a skilled Data Privacy and Information Security Specialist to join their dynamic team and lead efforts in securing data assets across the firm.
Job Description:
The Data Privacy and Information Security Specialist will be responsible for developing, implementing, and maintaining comprehensive data privacy and information security programs. This role requires a deep understanding of data protection regulations, cyber threats, and security best practices. The ideal candidate will work collaboratively with various departments to ensure compliance with relevant laws and safeguard our organization’s data.
Key Responsibilities:
Develop and implement data privacy policies and procedures in compliance with GDPR, CCPA, HIPAA, and other relevant regulations.
Conduct regular security risk assessments and audits to identify vulnerabilities and develop mitigation strategies.
Monitor and respond to data breaches, security incidents, and cyber threats.
Provide guidance and training to employees on data protection and information security best practices.
Collaborate with IT and legal teams to ensure data protection measures are integrated into all systems and processes.
Maintain up-to-date knowledge of industry trends, regulatory changes, and emerging threats in data privacy and information security.
Oversee the management of data access controls and permissions.
Coordinate with third-party vendors to ensure their data protection practices align with company standards.
Prepare and present reports on the state of data privacy and security to senior management.
Qualifications:
Bachelor’s degree in Computer Science, Information Security, or related field. Master’s degree preferred.
Professional certifications such as CISSP, CISM, CIPP, or equivalent.
Minimum of 5 years of experience in data privacy and information security roles.
In-depth knowledge of data protection regulations and standards (e.g., GDPR, CCPA, HIPAA).
Proven experience in conducting security risk assessments and managing incident response.