Specialist, Data Privacy
Execute information security activities in accordance with approved policies, standards, and procedures.
Perform assigned information security and governance tasks to support organizational compliance requirements.
Contribute subject-matter expertise to information security initiatives within defined scope.
Apply approved information security standards and controls across systems, processes, and documentation.
Participate in information security awareness activities by providing domain input when required.
Information Security & Governance
Perform information security and IT risk assessments within assigned scope and document results.
Execute control checks against approved information security policies, standards, and regulatory requirements.
Conduct third-party and vendor security assessments as assigned and document findings.
Maintain compliance evidence and security documentation in line with regulatory and audit requirements.
Analyze security control effectiveness and report observations through defined channels.
Apply approved security policies and procedures in day-to-day operational activities.
Collaborate on Security Initiatives
Coordinate with group-level stakeholders to support the implementation of security initiatives and action plans.
Ensure alignment of security practices with industry standards and regulatory requirements.
Apply group security playbooks and standards within the organization as directed.
Provide technical and governance input related to information security controls and requirements.
Identify control gaps or implementation issues and escalate through appropriate management channels.
Contribute to continuous improvement by documenting lessons learned and operational observations.
Outsourced Cyber Security Services
Support coordination with shared service providers responsible for IT and cybersecurity services.
Monitor service delivery and assist in tracking compliance with contractual agreements and SLAs.
Participate in security assessments and audits involving external service providers.
Data Protection & Privacy
Perform data classification and protection activities in line with approved data protection requirements.
Execute controls related to PII and PHI data security as defined by policies and procedures.
Review data handling practices and document observations related to privacy compliance.
Support identification and documentation of data protection risks and incidents.
Identity and Access Governance
Preform Identity and Access Management governance activities, including onboarding, offboarding, access reviews, and recertification processes.
Review privileged access and MFA controls and document compliance status.
Maintain access governance records and supporting evidence.
Standard duties
Execute information security tasks in accordance with approved group playbooks and operational procedures.
Perform security monitoring, vulnerability tracking, and compliance checks within assigned scope.
Maintain GRC documentation, risk registers, and compliance trackers.
Perform control testing and evidence collection activities for audits and regulatory reviews.
Track information security risks and remediation actions and report status through defined channels.
Document information security incidents, root causes, and corrective actions as assigned.
Prepare technical and governance inputs used by management for security reporting.
Apply ISMS processes and contribute to continuous improvement activities.
Coordinate operationally with shared services teams to execute assigned security activities.
Support incident tracking, root cause analysis (RCA), and corrective action plans (CAPA).
Bachelor’s degree in information technology, Information Security, or a related field.
3-6 years of experience in information security, IT governance, risk, or compliance roles.
Knowledge of information security standards and frameworks such as ISO 27001, ADHICS, NESA IA, COBIT, or similar.
Relevant professional certifications (e.g., ISO 27001, CISA, Security+, or equivalent) are an advantage.
Strong execution capability in information security and governance activities.
Ability to perform detailed assessments and document findings accurately.
Good understanding of security controls, risk management, and compliance requirements.
Ability to work within defined procedures, playbooks, and escalation paths.
Strong analytical and documentation skills.
Effective communication skills for reporting findings and observations.