Manager - Data Security Analysis

To manage daily operations of Cyber Security data privacy & security unit.

1 - Data Security Management:

·         Facilitate a data-driven, risk-based approach to develop, manage and maintain data protection control standards, procedures and guidelines.

·         Develop and maintain the Cybersecurity data protection process, guidelines for the organization.

·         Analyse security risks to data processing systems, networks, and applications.

·         Manage data security controls, including encryption, access controls, and data loss prevention (DLP) solutions.

·         Collaborate with IT teams to integrate security measures into data systems and applications.

·         Identify, implement and support strategic projects to enhance and mature data classification, labelling, data loss prevention, encryption, and cloud data security protection.

2 - Data Security Operations Management:

·         Implement data security solutions.

·         Implement data security solutions for BUPA Arabia’s third-party integration.

·         Implement and monitor data classification and data leakage controls.

·         Monitor and approve data sharing requests.

·         Implement data security technologies such as encryption, tokenization, data masking, and secure data transfer protocols.

·         Identifying and preventing data leakage using data loss prevention (DLP) tools and techniques.

3 - Data Security Compliance:

·         Conducting regular security assessments and audits to ensure compliance with regulations and industry standards.

·         Manage and coordinate data protection audit, compliance, regulatory, client assurance, and third-party assessment projects.

·         Implement and ensure compliance to regulatory requirements such as SDAIA, SAMA, and NCA.

·         Oversight of data security findings and remediation plans, tracking progress and assist with coordinating cross functional interactions.

4 - Data Security Monitoring & Awarenes:

·         Develop and implement communication strategies to maintain stakeholder visibility and awareness on all Data Protection initiatives.

·         Monitoring and investigating security incidents related to data breaches, unauthorized access, or data leaks.

·         Develop and maintain data protection dashboard, metrics roadmap, and scorecards.

·         Review and analyse all logs related to data access and sharing especially logs generated by our Data Loss Prevention (DLP) tool. 

·         Lead data protection change management, knowledge base, awareness and communication for enterprise-wide programs.

·         3+ years

·         Communication skills

·         Risk based approach

·         Fast learning and application

·         Adherence to confidentiality of data

·         Multitasking

·         Understand Risk assessment and management methodology.

·         Strong understanding of data security principles, including confidentiality, integrity, and availability (CIA).

·         Experience in Security project management and planning.

·         Experience in data security incident response and handling security incidents, including forensic analysis and remediation.

·         Strong analytical and problem-solving skills, with the ability to analyse complex data security issues and recommend solutions.

·         Excellent communication and collaboration skills for working with cross-functional teams and stakeholders.

·         Experience in information security management

·         Knowledge of Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, and service orchestration.

·         BE-IT / B Tech /Comps

·         Certification in information security & data protection

·         Vendor-specific certifications such as, Microsoft DLP, Certified McAfee Security Specialist, Certified Symantec Data Protection Professional etc.

·         Certified Data Protection Officer (CDPO)

·         Certified Information Systems Security Professional (CISSP)

·         Certified Information Security Manager (CISM)

·         Certified Information Security Auditor (CISA)