Data Security Officer - Hybrid, Risk & Compliance Lead

Singapore Department of Statistics (DOS); Singapore; Hybrid; SGD 60,000 - 90,000; Full time

Benefits offered by this job

Career development and training

Flexible working arrangements

Market competitive benefits

Job summary

The Singapore Department of Statistics (DOS) is seeking a Data Security Officer to conduct comprehensive analyses of data assets and evaluate existing controls throughout the data lifecycle.

You will spearhead the implementation of data access controls and risk management strategies, ensuring compliance with relevant frameworks. Strong analytical and problem-solving skills are essential for success in this role.

Your role will also involve monitoring and enhancing data protection measures and ensuring the effective deployment of security technologies.

Qualifications

• CRISC certification required; ISO27001 certification experience is a plus.
• Experience in IT, Computer Engineering, or related fields.
• Familiarity with data compliance frameworks is advantageous.

Responsibilities

• Conduct data asset analysis and assess compliance.
• Spearhead enhanced data access controls implementation.
• Execute regular risk assessments on data assets.

Skills

CRISC certification

Knowledge of ISO27001

Information Systems expertise

Data lifecycle management

Analytical skills

Problem-solving skills

Education

Bachelor's degree in IT or related fields

Job description

The Data Security Officer will conduct a comprehensive analysis of data assets, evaluate existing controls, and assess compliance throughout the data lifecycle, as well as provide actionable implementation recommendations.

What you will be working on

A. Implementation and Oversight

• Spearhead the deployment of enhanced data access controls and advanced virtualisation strategies
• Manage the seamless integration of automated compliance checks within existing workflows
• Monitor and enhance data protection measures through continuous assessment

B. Risk Management and Compliance

• Execute regular risk assessments focusing on data assets and access patterns
• Maintain alignment with IM8 requirements, PSDSRC recommendations and relevant regulatory frameworks
• Develop and update comprehensive data security policies and procedures

C. Data Flow Analysis and Optimisation

• Evaluate organisational data usage patterns and workflows
• Identify and implement data virtualisation opportunities
• Partner with divisions to streamline data access processes

D. Technology Optimisation

• Leverage Denodo's capabilities to their full potential
• Monitor and evaluate emerging data security technologies for potential implementation

What we are looking for

• Candidate with experience on ISO27001 certification as lead implementer or auditor will have an advantage
• Experience in setting up policies and operating Denodo or similar tools will be an advantage
• Possess knowledge or experience in Information Systems, Information Technology, Computer Engineering, Risk Analytics or related fields
• Familiarity with data access controls, data lifecycle management, and compliance frameworks will be advantageous
• Proactively monitor control implementation and propose any mitigation measure necessary to maintain risk posture
• Strong problem-solving and analytical skills, with attention to detail
• Able to work well both independently and as a member of a team

Development Opportunities and Benefits

• DOS believes in the career development and training of our staff to bring out their best potential at work
• You will be equipped with skills and subject matter know-how via in-house and external learning and development opportunities. You will also be exposed to different statistical work via our structured job rotation programme.
• DOS offers attractive and market competitive benefits which include mid-year & year-end variable payments and market adjustment component.
• To support your personal needs, DOS also provides for flexible working arrangements including hybrid work and staggered working hours.

We encourage interested candidates to apply directly for the role via Careers@Gov.