ROLE PURPOSE
This role involves collaborating in the planning and execution of new technical data protection initiatives while also offering guidance and support for ongoing tasks managed by the operational team. By working closely with the Data, this position helps ensure that data protection measures are effectively implemented and maintained.
PRINCIPAL ACCOUNTABILITIES
- Supporting the Data Protection Strategy: Play an active role in advancing the data protection strategy by engaging in new projects and initiatives. This includes aiding in the definition of technology requirements to enhance data protection measures, ensuring they keep pace with evolving threats and comply with new regulations such as the PDPA and upcoming data sharing laws.
- Contributing to Risk Analysis and Mitigation: Regularly participate in the evaluation of business processes and data flow diagrams. Analyze data lineage and the results of automated data discoveries to identify potential risks, threats, and areas lacking coverage, and suggest appropriate controls to mitigate these risks.
- Assisting in Business Rules Management: Provide support in managing business rules and handling exception requests from data owners regarding data protection tools. Conduct supervised health checks of these tools to uncover any hidden system issues and propose strategies to ensure their optimal performance.
- Facilitating Event Analysis: Work alongside team members to analyze events, identify patterns, and detect correlations using data protection tools that monitor Data at Rest, Data in Motion, and Data in Use. Contribute to developing action plans that leverage these insights to enhance data protection measures.
- Collaborating with Stakeholders: Engage with various stakeholders across the Bank, including data owners and the DPO, to assist in refining the DPP Methodology. This involves helping to update policies, standards, procedures, and the operating model to promote continuous improvement, while also serving as a point of contact for data protection-related issues to ensure effective communication and alignment.
- Supporting Data Security Compliance: Assist in addressing data security requirements stemming from new data privacy, data protection, and data sharing laws. Help ensure the organization is equipped to meet these evolving legal standards.
- Aiding Compliance Mapping: Contribute to the process of aligning compliance requirements of relevant data protection laws with existing technical controls. Evaluate their effectiveness and help identify new initiatives to bridge any gaps found.
QUALIFICATIONS
- Academic Qualifications: Bachelor's degree in information technology, Data Science or a related discipline. Relevant coursework or certifications in data protection and privacy laws are beneficial.
- Experience: 2-4 years of experience in data protection, privacy compliance, IT, or a related field.
ONLY SHORTLISTED CANDIDATES WILL BE NOTIFIED