Data Security Analysis

#### **Job Description** To manage daily operations of Cyber Security data privacy \& security unit. 1 \- **Data Security Management:** * Facilitate a data\-driven, risk\-based approach to develop, manage and maintain data protection control standards, procedures and guidelines. * Develop and maintain the Cybersecurity data protection process, guidelines for the organization. * Analyse security risks to data processing systems, networks, and applications. * Manage data security controls, including encryption, access controls, and data loss prevention (DLP) solutions. * Collaborate with IT teams to integrate security measures into data systems and applications. * Identify, implement and support strategic projects to enhance and mature data classification, labelling, data loss prevention, encryption, and cloud data security protection. 2 \- **Data Security Operations Management:** * Implement data security solutions. * Implement data security solutions for BUPA Arabia’s third\-party integration. * Implement and monitor data classification and data leakage controls. * Monitor and approve data sharing requests. * Implement data security technologies such as encryption, tokenization, data masking, and secure data transfer protocols. * Identifying and preventing data leakage using data loss prevention (DLP) tools and techniques. 3 \- **Data Security Compliance:** * Conducting regular security assessments and audits to ensure compliance with regulations and industry standards. * Manage and coordinate data protection audit, compliance, regulatory, client assurance, and third\-party assessment projects. * Implement and ensure compliance to regulatory requirements such as SDAIA, SAMA, and NCA. * Oversight of data security findings and remediation plans, tracking progress and assist with coordinating cross functional interactions. 4 \- **Data Security Monitoring \& Awarenes:** * Develop and implement communication strategies to maintain stakeholder visibility and awareness on all Data Protection initiatives. * Monitoring and investigating security incidents related to data breaches, unauthorized access, or data leaks. * Develop and maintain data protection dashboard, metrics roadmap, and scorecards. * Review and analyse all logs related to data access and sharing especially logs generated by our Data Loss Prevention (DLP) tool. * Lead data protection change management, knowledge base, awareness and communication for enterprise\-wide programs. #### **Skills** * 3\+ years * Communication skills * Risk based approach * Fast learning and application * Adherence to confidentiality of data * Multitasking * Understand Risk assessment and management methodology. * Strong understanding of data security principles, including confidentiality, integrity, and availability (CIA). * Experience in Security project management and planning. * Experience in data security incident response and handling security incidents, including forensic analysis and remediation. * Strong analytical and problem\-solving skills, with the ability to analyse complex data security issues and recommend solutions. * Excellent communication and collaboration skills for working with cross\-functional teams and stakeholders. * Experience in information security management * Knowledge of Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, and service orchestration. * BE\-IT / B Tech /Comps * Certification in information security \& data protection * Vendor\-specific certifications such as, Microsoft DLP, Certified McAfee Security Specialist, Certified Symantec Data Protection Professional etc. * Certified Data Protection Officer (CDPO) * Certified Information Systems Security Professional (CISSP) * Certified Information Security Manager (CISM) * Certified Information Security Auditor (CISA)