Senior Data Security Specialist

Your tasks

We are seeking a Senior Data Security Specialist to develop, implement, and continuously enhance data security controls supporting our international business operations.

The successful candidate will be responsible for data security governance, cross-border data protection, security risk assessments, incident response, and compliance with applicable international data protection and security requirements.

1. Data Security Framework Development

• Design, implement, and maintain a comprehensive data security management framework for international business operations.
• Establish policies, standards, and procedures to protect data throughout its lifecycle.
• Regularly review and improve security controls in response to evolving business requirements, regulatory developments, and emerging threats.
• Lead or participate in data security initiatives, including encryption solutions, data masking, access management, and security audit platforms.

2. Data Security Compliance Management

• Monitor and interpret applicable data security regulations and industry standards, including GDPR, CCPA/CPRA, Singapore's PDPA, and relevant international requirements.
• Translate regulatory and business requirements into practical security controls and internal guidelines.
• Conduct security and compliance assessments covering data collection, storage, processing, sharing, transfer, retention, and deletion.
• Support relevant security and privacy management certifications, such as ISO/IEC 27001 and ISO/IEC 27701.
• Maintain compliance documentation, audit records, and remediation plans.
• Coordinate with internal and external auditors and relevant regulatory stakeholders when required.

3. Cross-Border Data Transfer Security

• Develop and implement security controls for international data transfers.
• Assess data transfer risks and recommend appropriate technical and organisational safeguards.
• Implement secure transfer solutions, including encrypted communications, VPNs, and secure data exchange platforms.
• Establish and maintain internal review and approval procedures for cross-border data transfers.
• Monitor and audit cross-border data transfer activities to identify anomalies and potential security risks.

4. Data Security Risk Assessment and Mitigation

• Conduct periodic security risk assessments covering data assets, applications, infrastructure, and business processes.
• Identify vulnerabilities, assess potential business impacts, and recommend appropriate mitigation strategies.
• Coordinate remediation activities and monitor their effectiveness.
• Establish security risk monitoring and early-warning mechanisms.
• Evaluate emerging security technologies, threats, and industry best practices.

5. Security Incident Response

• Develop and maintain data security incident response plans, escalation procedures, and incident classification standards.
• Coordinate investigations involving suspected or confirmed data breaches, unauthorised access, data tampering, and other security incidents.
• Support forensic investigations, root cause analysis, impact assessments, containment, and remediation activities.
• Work with legal and compliance teams to support regulatory notifications and stakeholder communications where required.
• Conduct post-incident reviews and implement preventive improvements.

6. Security Awareness and Training

• Develop and deliver data security awareness programmes for international business teams.
• Promote secure data handling practices through training, workshops, and knowledge-sharing activities.
• Establish mechanisms for sharing security lessons learned and operational best practices.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Law, or a related discipline, or equivalent relevant professional experience.
• At least 5 years of relevant experience in data security, information security, or cybersecurity operations.
• Strong knowledge of data security regulations, governance frameworks, and relevant international standards.
• Hands-on experience with encryption, data masking, access controls, audit logging, and security monitoring.
• Familiarity with data security technologies and tools, including their evaluation, implementation, and operation.
• Understanding of cross-border data transfer security requirements and technical safeguards.
• Experience conducting security risk assessments, identifying control weaknesses, and coordinating remediation.
• Proficiency in at least one scripting language, such as Python or Shell, for security automation and operational tasks.
• Strong analytical, incident response, stakeholder management, and problem-solving capabilities.
• Ability to collaborate effectively with geographically distributed and cross-functional teams.

• Experience managing data security for international internet, technology, or gaming businesses.
• Experience implementing multi-region data security controls and cross-border data governance frameworks.
• Relevant professional certifications such as CISSP, CIPP/E, or other recognised information security and privacy qualifications.
• Experience supporting ISO/IEC 27001 or ISO/IEC 27701 implementation and certification projects.