Deskripsi Pekerjaan
Are you a seasoned security professional ready to protect critical data assets? Reefan International Limited is seeking a Senior Data Security & Compliance Analyst to join our dynamic team in Makati City. In this pivotal role, you will ensure our organization meets global regulatory standards and implement robust security frameworks to safeguard sensitive information. We are looking for an individual with a deep understanding of data privacy laws and a proactive approach to threat management.
As a Senior Analyst, you will act as the guardian of our data integrity, bridging the gap between technical security teams and legal compliance requirements. You will be responsible for conducting comprehensive risk assessments, leading audit preparation, and ensuring our systems adhere to international standards such as ISO 27001 and GDPR. If you are driven by the challenge of securing digital infrastructure and ensuring regulatory adherence in a fast-paced corporate environment, we want to hear from you.
Tanggung Jawab
- Develop, implement, and maintain comprehensive data security policies and compliance frameworks in line with local and international regulations.
- Conduct regular security audits and risk assessments to identify vulnerabilities and recommend remediation strategies.
- Monitor security systems and networks to detect, analyze, and respond to potential threats or breaches in real-time.
- Manage the compliance lifecycle, including preparing for and responding to internal and external audits (e.g., ISO 27001, SOC 2).
- Lead incident response planning and coordinate with IT teams to minimize downtime and data loss during security events.
- Provide training and guidance to staff on data protection best practices and compliance requirements.
- Stay abreast of the latest cybersecurity trends, regulatory changes, and emerging threats.
Kualifikasi
- Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or a related field.
- Minimum of 5-7 years of experience in data security, compliance, or risk management roles.
- Professional certifications such as CISSP, CISM, CISA, or CRISC are highly preferred.
- Deep knowledge of data protection laws, including GDPR, CCPA, and local Philippine data privacy regulations.
- Strong understanding of network security protocols, encryption standards, and identity management.
- Excellent analytical skills with the ability to interpret complex data and security reports.
- Strong communication skills, capable of explaining technical compliance issues to non-technical stakeholders.