Senior Data Security Specialist

Job Overview

We are seeking a Senior Data Security Specialist to develop, implement, and continuously enhance data security controls supporting our international business operations.

The successful candidate will be responsible for data security governance, cross-border data protection, security risk assessments, incident response, and compliance with applicable international data protection and security requirements.

Key Responsibilities

1. Data Security Framework Development

• Design, implement, and maintain a comprehensive data security management framework for international business operations.

• Establish policies, standards, and procedures to protect data throughout its lifecycle.

• Regularly review and improve security controls in response to evolving business requirements, regulatory developments, and emerging threats.

• Lead or participate in data security initiatives, including encryption solutions, data masking, access management, and security audit platforms.

2. Data Security Compliance Management

• Monitor and interpret applicable data security regulations and industry standards, including GDPR, CCPA/CPRA, Singapore's PDPA, and relevant international requirements.

• Translate regulatory and business requirements into practical security controls and internal guidelines.

• Conduct security and compliance assessments covering data collection, storage, processing, sharing, transfer, retention, and deletion.

• Support relevant security and privacy management certifications, such as ISO/IEC 27001 and ISO/IEC 27701.

• Maintain compliance documentation, audit records, and remediation plans.

• Coordinate with internal and external auditors and relevant regulatory stakeholders when required.

3. Cross-Border Data Transfer Security

• Develop and implement security controls for international data transfers.

• Assess data transfer risks and recommend appropriate technical and organisational safeguards.

• Implement secure transfer solutions, including encrypted communications, VPNs, and secure data exchange platforms.

• Establish and maintain internal review and approval procedures for cross-border data transfers.

• Monitor and audit cross-border data transfer activities to identify anomalies and potential security risks.

4. Data Security Risk Assessment and Mitigation

• Conduct periodic security risk assessments covering data assets, applications, infrastructure, and business processes.

• Identify vulnerabilities, assess potential business impacts, and recommend appropriate mitigation strategies.

• Coordinate remediation activities and monitor their effectiveness.

• Establish security risk monitoring and early-warning mechanisms.

• Evaluate emerging security technologies, threats, and industry best practices.

5. Security Incident Response

• Develop and maintain data security incident response plans, escalation procedures, and incident classification standards.

• Coordinate investigations involving suspected or confirmed data breaches, unauthorised access, data tampering, and other security incidents.

• Support forensic investigations, root cause analysis, impact assessments, containment, and remediation activities.

• Work with legal and compliance teams to support regulatory notifications and stakeholder communications where required.

• Conduct post-incident reviews and implement preventive improvements.

6. Security Awareness and Training

• Develop and deliver data security awareness programmes for international business teams.

• Promote secure data handling practices through training, workshops, and knowledge-sharing activities.

• Establish mechanisms for sharing security lessons learned and operational best practices.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Law, or a related discipline, or equivalent relevant professional experience.

• At least 5 years of relevant experience in data security, information security, or cybersecurity operations.

• Strong knowledge of data security regulations, governance frameworks, and relevant international standards.

• Hands-on experience with encryption, data masking, access controls, audit logging, and security monitoring.

• Familiarity with data security technologies and tools, including their evaluation, implementation, and operation.

• Understanding of cross-border data transfer security requirements and technical safeguards.

• Experience conducting security risk assessments, identifying control weaknesses, and coordinating remediation.

• Proficiency in at least one scripting language, such as Python or Shell, for security automation and operational tasks.

• Strong analytical, incident response, stakeholder management, and problem-solving capabilities.

• Ability to collaborate effectively with geographically distributed and cross-functional teams.

Preferred Qualifications

• Experience managing data security for international internet, technology, or gaming businesses.

• Experience implementing multi-region data security controls and cross-border data governance frameworks.

• Relevant professional certifications such as CISSP, CIPP/E, or other recognised information security and privacy qualifications.

• Experience supporting ISO/IEC 27001 or ISO/IEC 27701 implementation and certification projects.