Job Description: Trigyn has a contractual opportunity for a Data Security Lead. This resource will be working at our client site in Valencia, Spain.
Job Responsibilities: Create, implement, and manage Data Security functions and processes. Create, implement, and manage a data loss prevention program including processes, procedures, training, and playbooks. Improve maturity level of data security to the defined higher level and measure and report the progress regularly by developing Key Performance Indicators (KPI) / metrics for performance and risk monitoring. Contribute to the review, consistent implementation, and compliance-monitoring of Client information security policies, operating procedures standards, and guidelines. Coordinate and/or support security audit requests and track follow-up on recommendations (including FISMA / NIST 800-53 controls, ISO 27001). Participate actively in the implementation of the Global Cybersecurity Strategy, including the support of awareness-related activities and coordinating global workshops/webinars. Monitor and audit information security controls while measuring results and responding to new risks. Gather, develop, and organize evidence for security audits. Conduct threat, vulnerability, risk, and compliance assessments. Conduct data protection impact assessments. Assist in investigations and audits. Provide advice to requests/tickets related to data security, rotation, and access. Provide advisory to support decision-making activities related to data security topics. Perform such other duties as may be assigned. Education: Bachelor's degree in computer science, information systems, mathematics, statistics, or related field from an accredited academic institution with two years of relevant professional experience; or University degree in the above fields with four years of relevant professional experience.
Qualifications: Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Chief Information Security Officer (CCISO), Certified Secure Software Lifecycle Professional (CSSLP), Certified Secure Web Application Engineer (CASE), Certified Secure Web Application Engineer (CSWAE), Governance, Risk, and Compliance Professional (GRCP), Certified Ethical Hacker (CEH), or related will be a distinct advantage in addition to cloud computing certifications at associate/professional/specialty level from Azure and/or AWS. Information Technology Infrastructure Library (ITIL) and Prince2 Foundation are added advantages. Microsoft Purview working knowledge is desirable.
#J-18808-Ljbffr