Data Protection Specialist

Role Purpose

To ensure SANS complies with data protection regulations and best practices. This role focuses on safeguarding sensitive information, managing and implementing data protection initiatives, strategies, and fostering a culture of data protection across the organization. The specialist will work collaboratively with various departments to mitigate risks, implement effective data management policies, and respond to data protection inquiries and incidents., and provide advice on technical, compliance and controls that need to be enhanced or deployed within the set KPIs, agreed budgets and adopted policies and procedures as well as applicable regulatory requirements

Key Accountability Areas

Key Activities

Data Protection Specialist

 

• Develop, implement, and maintain data protection strategies that secure sensitive data against unauthorized access, loss, and breaches.
• Design and deploy encryption, anonymization, and masking techniques for protecting sensitive data.
• Configure and manage tools for data access monitoring, encryption, and data loss prevention (DLP).
• Ensure adherence to data protection laws and regulations by developing and maintaining compliance frameworks.
•  Create and update data protection policies, procedures, and guidelines to align with best practices and regulatory requirements.
• Control data protection project risks and the development of risk mitigation activities in collaboration with the relevant internal stakeholders
• Collaborate in data breach responses, including investigation, reporting, and remediation, in collaboration with cybersecurity incident response teams.
• Support the development and implementation of data governance frameworks, including data classification and retention policies.
• Stay updated on the latest data protection technologies, trends, and threats.
• Propose and implement improvements to existing data protection protocols.
• Collaborate with development teams to ensure secure data processing within applications
• Perform regular audits and assessments of data processing activities to ensure compliance and identify areas for improvement.
• Maintain comprehensive documentation of data protection activities, including audits, training sessions, and incident reports.
• Work closely with IT, legal, and operational teams to enhance data protection measures and address compliance challenges
• Promote effective collaboration and communication with internal team members and maintain cross-departmental alignment to ensure synergy and coherence.

Policies, Processes and Procedures

• Conduct day-to-day activities while ensuring compliance to policies and procedures
• Contribute to the identification of opportunities for continuous improvement of systems, processes taking into account leading practices, changes in business environment, cost reduction and productivity improvement

Knowledge and Experience

• Minimum of 6 years of relevant experience in data protection,, or compliance roles.
• Experience in risks or data security and protection is preferred
• Familiarity with personal data protection regulations and policies
• Knowledge in information security and protection (classification, data privacy
• In-depth knowledge of data protection laws and regulations.

Education and Certifications

• Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering or in related fields
• Certification in data protection (e.g., CIPP, CIPM, ISO 27001), CISSP preferred