Senior Data Security Specialist

HURELAX PTE. LTD.; Singapore; In loco; SGD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

HURELAX PTE. LTD. seeks a Senior Data Security Specialist to develop and continuously enhance data security controls for our international operations.

You will oversee governance, cross-border transfers, risk assessments, incident response, and compliance with global data protection requirements, including ISO/IEC 27001/27701 support. The role requires hands-on experience with encryption, data masking, access controls, and audit logging, plus strong regulatory knowledge.

Competenze

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Law, or related field, or equivalent professional experience.
• At least 5 years of relevant experience in data security or cybersecurity operations.
• Strong knowledge of data security regulations, governance frameworks, and international standards.
• Hands-on experience with encryption, data masking, access controls, audit logging, and security monitoring.
• Familiarity with data security technologies and cross-border transfer requirements.
• Scripting ability (Python or Shell) for automation.

Mansioni

• Develop and maintain a comprehensive data security framework for international operations.
• Establish policies and procedures to protect data through its lifecycle.
• Lead or participate in data security initiatives including encryption, masking, access management, and audits.
• Monitor regulations like GDPR, CCPA/CPRA, PDPA, and related standards; translate into controls.
• Coordinate with auditors and regulatory stakeholders; maintain compliance docs and remediation plans.
• Conduct risk assessments and implement mitigation strategies; monitor effectiveness.
• Develop incident response plans and coordinate investigations; support regulatory notifications.
• Deliver security awareness training to international teams and promote best practices.

Conoscenze

Data security

Regulatory knowledge

Incident response

Cross-border data transfer

Security governance

Python scripting

Formazione

Bachelor's degree in Computer Science / Cybersecurity

Strumenti

Encryption

Data masking

Audit logging

Security monitoring

Access controls

Descrizione del lavoro

Job Overview

We are seeking a Senior Data Security Specialist to develop, implement, and continuously enhance data security controls supporting our international business operations.

The successful candidate will be responsible for data security governance, cross-border data protection, security risk assessments, incident response, and compliance with applicable international data protection and security requirements.

Key Responsibilities

1. Data Security Framework Development

• Design, implement, and maintain a comprehensive data security management framework for international business operations.

• Establish policies, standards, and procedures to protect data throughout its lifecycle.

• Regularly review and improve security controls in response to evolving business requirements, regulatory developments, and emerging threats.

• Lead or participate in data security initiatives, including encryption solutions, data masking, access management, and security audit platforms.

2. Data Security Compliance Management

• Monitor and interpret applicable data security regulations and industry standards, including GDPR, CCPA/CPRA, Singapore's PDPA, and relevant international requirements.

• Translate regulatory and business requirements into practical security controls and internal guidelines.

• Conduct security and compliance assessments covering data collection, storage, processing, sharing, transfer, retention, and deletion.

• Support relevant security and privacy management certifications, such as ISO/IEC 27001 and ISO/IEC 27701.

• Maintain compliance documentation, audit records, and remediation plans.

• Coordinate with internal and external auditors and relevant regulatory stakeholders when required.

3. Cross-Border Data Transfer Security

• Develop and implement security controls for international data transfers.

• Assess data transfer risks and recommend appropriate technical and organisational safeguards.

• Implement secure transfer solutions, including encrypted communications, VPNs, and secure data exchange platforms.

• Establish and maintain internal review and approval procedures for cross-border data transfers.

• Monitor and audit cross-border data transfer activities to identify anomalies and potential security risks.

4. Data Security Risk Assessment and Mitigation

• Conduct periodic security risk assessments covering data assets, applications, infrastructure, and business processes.

• Identify vulnerabilities, assess potential business impacts, and recommend appropriate mitigation strategies.

• Coordinate remediation activities and monitor their effectiveness.

• Establish security risk monitoring and early-warning mechanisms.

• Evaluate emerging security technologies, threats, and industry best practices.

5. Security Incident Response

• Develop and maintain data security incident response plans, escalation procedures, and incident classification standards.

• Coordinate investigations involving suspected or confirmed data breaches, unauthorised access, data tampering, and other security incidents.

• Support forensic investigations, root cause analysis, impact assessments, containment, and remediation activities.

• Work with legal and compliance teams to support regulatory notifications and stakeholder communications where required.

• Conduct post-incident reviews and implement preventive improvements.

6. Security Awareness and Training

• Develop and deliver data security awareness programmes for international business teams.

• Promote secure data handling practices through training, workshops, and knowledge-sharing activities.

• Establish mechanisms for sharing security lessons learned and operational best practices.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Law, or a related discipline, or equivalent relevant professional experience.

• At least 5 years of relevant experience in data security, information security, or cybersecurity operations.

• Strong knowledge of data security regulations, governance frameworks, and relevant international standards.

• Hands‑on experience with encryption, data masking, access controls, audit logging, and security monitoring.

• Familiarity with data security technologies and tools, including their evaluation, implementation, and operation.

• Understanding of cross‑border data transfer security requirements and technical safeguards.

• Experience conducting security risk assessments, identifying control weaknesses, and coordinating remediation.

• Proficiency in at least one scripting language, such as Python or Shell, for security automation and operational tasks.

• Strong analytical, incident response, stakeholder management, and problem‑solving capabilities.

• Ability to collaborate effectively with geographically distributed and cross‑functional teams.

Preferred Qualifications

• Experience managing data security for international internet, technology, or gaming businesses.

• Experience implementing multi‑region data security controls and cross‑border data governance frameworks.

• Relevant professional certifications such as CISSP, CIPP/E, or other recognised information security and privacy qualifications.

• Experience supporting ISO/IEC 27001 or ISO/IEC 27701 implementation and certification projects.