Data Security Officer

GovTech supports various Government Agencies in carrying out ICT delivery services and appoints Data Security Officers to oversee data security management within these agencies. The Data Security Officer role requires technical proficiency demonstrated in multiple cybersecurity domains. The role demands knowledge and/or practical experience in most of the domains below:

• Cybersecurity Governance frameworks,
• Security Operations including incident response,
• Architecture design and threat risk assessment,
• Security Testing.

The Data Security Officer will conduct comprehensive analysis of data assets, evaluate existing controls, and assess compliance throughout the data lifecycle, whilst providing actionable implementation recommendations to strengthen the organisation's data security posture.

Key responsibilities and contributions will include

Implementation and Oversight

• Lead the implementation of enhanced data access controls and advanced virtualisation techniques
• Oversee the integration of automated compliance checks into existing workflows
• Continuously monitor and optimise the effectiveness of data protection measures

Risk Management and Compliance

• Conduct regular risk assessments related to data movement and access
• Ensure ongoing compliance with IM8 rules, PSDSRC recommendations, and other relevant regulations
• Develop and maintain data security policies and procedures

Data Flow Analysis and Optimisation

• Analyse data usage patterns and flows across the organisation
• Identify opportunities for further virtualisation and reduced data movement
• Collaborate with divisions (business units) to optimise data access workflows

Technology Optimisation

• Maximise the use of Denodo's capabilities (and or equivalent)
• Stay abreast of emerging data security technologies and assess their potential application

Key Responsibilities

• Implementation and Oversight

  • Deploy enhanced security controls and data virtualisation strategies across the organisation.
  • Manage the integration of automated compliance checks within existing workflows, ensuring minimal disruption to operational processes.
  • Continuously monitor and enhance data protection measures through systematic assessment and improvement initiatives.

• Risk Management and Compliance

  • Conduct regular risk assessments and ensuring regulatory compliance for data assets throughout their lifecycle.
  • Maintain strict alignment with IM8 requirements and all relevant regulatory frameworks. This includes developing and regularly updating comprehensive data security policies and procedures to reflect evolving threats and regulatory changes.

• Data Flow Analysis and Optimisation

  • Conduct evaluation of organisational data usage patterns and workflows to identify inefficiencies and security gaps.
  • Identify and implement data virtualisation opportunities that enhance both security and operational efficiency.
  • Close partnership with various divisions is essential to streamline data access processes whilst maintaining robust security standards.

• Technology Optimisation

  • Expertise in leveraging data virtualisation tool’s (e.g. Denodo) capabilities to their full potential, ensuring maximum value from existing technology investments.
  • Continuously monitor and evaluate emerging data security technologies, providing recommendations for potential implementation based on organisational needs and risk assessments.