Business Analyst (Data Governance & Compliance)

CMC-APAC PRIVATE LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

CMC-APAC PRIVATE LIMITED seeks an experienced data governance and security lead to drive governance, protection, and incident management across enterprise data assets. You will formulate policies, collaborate with stakeholders, and coordinate with Government Agencies to ensure compliant data practices.

The role focuses on overseeing lifecycle management, data modelling, and master data governance while aligning with regulatory standards and business needs in a fast-paced environment.

Qualifications

• Bachelor’s degree in a relevant field.
• 7+ years of experience in data governance, data protection, or data security.
• Experience in risk assessments and IT/business audits.
• Ability to translate complex policies to business stakeholders.
• Certifications in data governance, data protection, or cybersecurity are advantageous.
• Experience with Singapore Government IM8 policies is advantageous.

Responsibilities

• Deliver data governance, data protection and data security initiatives.
• Formulate and drive data policies, standards, frameworks, processes and guidelines.
• Oversee information lifecycle management, data modelling and master data management.
• Lead risk assessments and IT/business audits; report findings clearly.
• Handle and report data incidents and coordinate response.
• Collaborate with stakeholders and liaise with Government Agencies as needed.
• Integrate data protection procedures into day-to-day operations.

Skills

Data governance

Data protection

Data security

Policy formulation

Data policies

Information lifecycle management

Data modelling

Master data management

Risk assessments

Audits

Data incidents handling

Project management

Analytical thinking

Communication

Stakeholder management

Negotiation

Education

Bachelor’s Degree in Computer Science

Bachelor’s Degree in Engineering

Bachelor’s Degree in Business Analytics

Bachelor’s Degree in Law

Bachelor’s Degree in Information Management

Bachelor’s Degree in Cybersecurity

Job description

What You Will Be Working On

Drive successful delivery of the following key outcomes through comprehensive research and impact analysis, defining and tracking of success metrics, as well as continuously improve on existing solutions.

• Plan and conduct regular programme activities and assessments relating to Data Security Risk Management and Personal Data Protection.
• Collaborate with internal and external stakeholders to structure data sharing arrangements for data to be accessed, used and shared legitimately with appropriate data protection safeguards put in place.
• Support Data Incident Management and Enterprise Data Risk Management activities.
• Support the review, formulating and driving awareness of data standards, policies, frameworks, processes, procedures, and guidelines to relevant stakeholders.
• Act as the main liaison for related Data Protection and Data Security queries and request submissions from/to other Government Agencies.
• Guide the integration of defined data protection, data privacy and data security procedures into day-to-day business operations.

What We Are Looking For

Bachelor’s Degree in Computer Science, Engineering, Business Analytics, Business Management, Law, Information Management, Cybersecurity, or related discipline.

7 or more years of relevant experience in one or more of the following areas:

• Leading and/or delivering data governance, data protection, or data security related work.
• Formulation of data policies, standards, frameworks, processes, and guidelines.
• Information/record management including information lifecycle management, data modelling, and master data management.
• Conducting risk assessments and/or IT and business audits.
• Handling and reporting data incidents.

Key skills and traits:

• Analytical, problem solving, and critical thinking skills, with the ability to join the dots.
• Meticulous with keen attention to detail and yet able to see the big picture.
• Strong communication skills with ability to translate and articulate complex policies and technical governance requirements in layman terms to business stakeholders.
• Strong collaboration, stakeholder management and negotiation skills.
• Adaptable and comfortable working in a fast-paced environment.
• Programme or project management skills.

Professional certifications in data governance, data protection, cybersecurity, data privacy, incident management, data analytics, business analytics, data science, or related fields will be advantageous.

Experience relevant to the drafting of, or compliance with Singapore Government IM8 policies would be advantageous.

Experience in Data/Cybersecurity would be advantageous.