Senior Data Security Specialist
First seen by Alion on Oct 22, 2026.
We are seeking a Senior Data Security Specialist to develop, implement, and continuously enhance data security controls supporting our international business operations.
The successful candidate will be responsible for data security governance, cross-border data protection, security risk assessments, incident response, and compliance with applicable international data protection and security requirements.
Key Responsibilities1. Data Security Framework Development
Design, implement, and maintain a comprehensive data security management framework for international business operations.
Establish policies, standards, and procedures to protect data throughout its lifecycle.
Regularly review and improve security controls in response to evolving business requirements, regulatory developments, and emerging threats.
Lead or participate in data security initiatives, including encryption solutions, data masking, access management, and security audit platforms.
2. Data Security Compliance Management
Monitor and interpret applicable data security regulations and industry standards, including GDPR, CCPA/CPRA, Singapore's PDPA, and relevant international requirements.
Translate regulatory and business requirements into practical security controls and internal guidelines.
Conduct security and compliance assessments covering data collection, storage, processing, sharing, transfer, retention, and deletion.
Support relevant security and privacy management certifications, such as ISO/IEC 27001 and ISO/IEC 27701.
Maintain compliance documentation, audit records, and remediation plans.
Coordinate with internal and external auditors and relevant regulatory stakeholders when required.
3. Cross-Border Data Transfer Security
Develop and implement security controls for international data transfers.
Assess data transfer risks and recommend appropriate technical and organisational safeguards.
Implement secure transfer solutions, including encrypted communications, VPNs, and secure data exchange platforms.
Establish and maintain internal review and approval procedures for cross-border data transfers.
Monitor and audit cross-border data transfer activities to identify anomalies and potential security risks.
4. Data Security Risk Assessment and Mitigation
Conduct periodic security risk assessments covering data assets, applications, infrastructure, and business processes.
Identify vulnerabilities, assess potential business impacts, and recommend appropriate mitigation strategies.
Coordinate remediation activities and monitor their effectiveness.
Establish security risk monitoring and early-warning mechanisms.
Evaluate emerging security technologies, threats, and industry best practices.
5. Security Incident Response
Develop and maintain data security incident response plans, escalation procedures, and incident classification standards.
Coordinate investigations involving suspected or confirmed data breaches, unauthorised access, data tampering, and other security incidents.
Support forensic investigations, root cause analysis, impact assessments, containment, and remediation activities.
Work with legal and compliance teams to support regulatory notifications and stakeholder communications where required.
Conduct post-incident reviews and implement preventive improvements.
6. Security Awareness and Training
Develop and deliver data security awareness programmes for international business teams.
Promote secure data handling practices through training, workshops, and knowledge-sharing activities.
Establish mechanisms for sharing security lessons learned and operational best practices.
Bachelor's degree in Computer Science, Cybersecurity, Information Security, Law, or a related discipline, or equivalent relevant professional experience.
At least 5 years of relevant experience in data security, information security, or cybersecurity operations.
Strong knowledge of data security regulations, governance frameworks, and relevant international standards.
Hands-on experience with encryption, data masking, access controls, audit logging, and security monitoring.
Familiarity with data security technologies and tools, including their evaluation, implementation, and operation.
Understanding of cross-border data transfer security requirements and technical safeguards.
Experience conducting security risk assessments, identifying control weaknesses, and coordinating remediation.
Proficiency in at least one scripting language, such as Python or Shell, for security automation and operational tasks.
Strong analytical, incident response, stakeholder management, and problem-solving capabilities.
Ability to collaborate effectively with geographically distributed and cross-functional teams.
Experience managing data security for international internet, technology, or gaming businesses.
Experience implementing multi-region data security controls and cross-border data governance frameworks.
Relevant professional certifications such as CISSP, CIPP/E, or other recognised information security and privacy qualifications.
Experience supporting ISO/IEC 27001 or ISO/IEC 27701 implementation and certification projects.
Skills
Analytical Approach, Data Protection Regulation, Security Compliance, Security Operations, Security Tools, Regulatory Compliance, governance framework, Security Framework, Security Requirements, Professional Experience, Data Security, implementing data protection, Security Risk Analysis, Data Transfer, Data Protection Management, Security Monitoring