Data Protection and Security Analyst

Isha Foundation, Inc.; Coimbatore District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A prominent nonprofit organization in Coimbatore is seeking a Data Protection Compliance Officer. In this role, you will manage DSR requests, ensure compliance with data protection laws, and lead incident response efforts. Candidates should possess a Master's degree and strong knowledge of global data privacy laws. This position requires excellent communication skills and the ability to work with diverse teams to safeguard sensitive data.

Responsibilities

• Manage DSR requests in compliance with data protection regulations.
• Conduct DPIAs for new projects and monitor compliance.
• Lead the response to data-related security incidents.
• Collaborate with IT and legal teams to handle incidents.
• Develop and maintain comprehensive data protection policies.

Skills

Data Protection Knowledge

Cybersecurity Expertise

Incident Response

Technical Proficiency

Risk Management

Communication

Education

Master Degree

Tools

SIEM tools

encryption

DLP solutions

Job description

1.DataProtectionCompliance & DSR Management:

DataSubject Rights (DSR) Requests: Manage and process DSR requests in compliance with data protection regulations such as GDPR, CCPA, and other applicable laws. This includes handling requests for access, correction, deletion, and portability of personal data.

PrivacyRegulations: Ensure the organization adheres to data protection laws and standards, including GDPR, CCPA, HIPAA, etc. Regularly review and update policies to maintain compliance.

DataProtectionImpact Assessments (DPIA): Conduct DPIAs for new projects, systems, or changes in processes that may affect personal data.

PrivacyAudits: Conduct internal audits to ensure that all data protection measures and processes are aligned with regulatory requirements.

Training & Awareness: Develop and deliver training programs on data protection policies and best practices to employees.

2.SecurityIncident Monitoring & Response:

Incident Monitoring: Continuously monitor internal and external threats to detect any security incidents, especially those that involve personal data or breach sensitive information.

Incident Response: Lead the response to data-related security incidents, including breaches of personal data, ensuring that all relevant parties are notified as per legal requirements.

Forensics: Work closely with the incident response team to investigate security breaches, assess the scope of impact, and implement corrective actions.

Collaboration with IT and Legal Teams: Collaborate with IT, legal, and compliance teams to handle data-related incidents, ensuring compliance with notification timelines and documenting the incident appropriately.

3.DataProtectionStrategy & SecurityMeasures:

DataEncryption: Ensure that sensitive data is protected through encryption, both at rest and in transit.

DataLoss Prevention (DLP): Implement and manage DLP tools to monitor, detect, and prevent unauthorized data transfers or leaks.

Access Controls: Work with the IT department to implement and enforce robust access control policies to limit access to personal data based on the principle of least privilege.

Backup and Recovery: Ensure data is adequately backed up, and there is a clear strategy for recovery in case of data loss or breach.

4. Policy Development and Implementation:

Policy Creation: Develop and maintain comprehensive data protection policies, including those related to data retention, handling, and destruction.

SecurityControls: Assist in the design and implementation of security controls to safeguard sensitive and personal data, ensuring proper segregation and protection.

Vendor Management: Work with third-party vendors to ensure that they meet data protection and security standards, especially if they handle personal data.

5. Reporting & Documentation:

Reporting: Regularly report to senior management and compliance teams on data protection and security status, including ongoing incidents, DSR request processing, and compliance audits.

Documentation: Maintain detailed records of DSR requests, security incidents, and compliance audits to support audits and regulatory requirements.

Qualifications

Master Degree

Desired Skills

• Data Protection Knowledge: Solid understanding of global data privacy laws (e.g., GDPR, CCPA, HIPAA) and frameworks for compliance.
• Cybersecurity Expertise: Knowledge of cybersecurity principles, threats, and mitigation strategies, including encryption, DLP, and incident response procedures.
• Incident Response: Experience in investigating security breaches, especially those involving personal data, and responding effectively to incidents.
• Technical Proficiency: Familiarity with common data protection technologies (e.g., encryption, access management tools, and DLP solutions) and security monitoring tools.
• Risk Management: Experience in performing risk assessments related to data protection and security.
• Communication: Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.

Preferred Skills

• Certifications: Relevant certifications, such as CISSP, CISA, CISM, CIPP/E, or Certified Information Privacy Manager (CIPM), would be advantageous.
• Forensics: Experience in digital forensics or data breach investigations.
• Technical Tools: Experience with SIEM tools (e.g., Splunk, QRadar), endpoint protection, and incident response platforms.
• Cloud Security: Familiarity with data protection strategies and security controls in cloud environments (e.g., AWS, Azure, GCP).