Ottawa
Data Security Advisor
We are looking for a Data Security Advisor for an upcoming opportunity with a Federal Government department.
About the Project:
Data Security includes the planning, development, and execution of security policies and procedures to provide proper authentication, authorization, access, and auditing of data and information assets. The goal of data security practices is to protect information assets in alignment with privacy and confidentiality regulations, contractual agreements, and business requirements. The client needs data security advisory to support the data protection activities of the organization, from audience data to business analytics, from personal data to facilities data.
About the Responsibilities:
- Document data protection requirements per sensitivity levels
- Document the security controls required to efficiently protect sensitive data
- Work with security awareness experts and data governance coordinator to develop guides and procedures for the end-users to help them integrate data protection requirements into their daily activities
- Lead the implementation of the data security controls from a people, process and tools perspective
- Work with all the Information Security team members to develop procedures and configure existing or new security solutions based on the data security needs (i. e. : SIEM monitoring, CASB monitoring, DLP solutions configuration, …)
- Attend committee meetings on Data to present a status of data security
- Work with the Privacy Office to ensure data protection tools are aligned with privacy regulations, policies, directives and guidelines
- Maintain relationships with designated/ad hoc data stewards to ensure data protection controls are in place across the organization
- Maintain a strong alignment with Data Governance activities
About the Qualifications:
- Strong and recognized expertise in data protection, data-driven decision making and data governance
- Experience of implementing a data security strategy
- Expected to produce documents for and engage in discussions with middle management
- Strong and recognized leadership experience in large organizations comparable to the client
- At least 10 years of experience in data security related activities
- Excellent soft skills, self-starter
- Certifications in Information Security (CISSP, CISM, CISA, or equivalent)
- An asset : Certification in Privacy
