Specialist, Data Privacy

• Execute information security activities in accordance with approved policies, standards, and procedures.
• Perform assigned information security and governance tasks to support organizational compliance requirements.
• Contribute subject-matter expertise to information security initiatives within defined scope.
• Apply approved information security standards and controls across systems, processes, and documentation.
• Participate in information security awareness activities by providing domain input when required.

Information Security & Governance

• Perform information security and IT risk assessments within assigned scope and document results.
• Execute control checks against approved information security policies, standards, and regulatory requirements.
• Conduct third-party and vendor security assessments as assigned and document findings.
• Maintain compliance evidence and security documentation in line with regulatory and audit requirements.
• Analyze security control effectiveness and report observations through defined channels.
• Apply approved security policies and procedures in day-to-day operational activities.

Collaborate on Security Initiatives

• Coordinate with group-level stakeholders to support the implementation of security initiatives and action plans.
• Ensure alignment of security practices with industry standards and regulatory requirements.
• Apply group security playbooks and standards within the organization as directed.
• Provide technical and governance input related to information security controls and requirements.
• Identify control gaps or implementation issues and escalate through appropriate management channels.
• Contribute to continuous improvement by documenting lessons learned and operational observations.

Outsourced Cyber Security Services

• Support coordination with shared service providers responsible for IT and cybersecurity services.
• Monitor service delivery and assist in tracking compliance with contractual agreements and SLAs.
• Participate in security assessments and audits involving external service providers.

Data Protection & Privacy

• Perform data classification and protection activities in line with approved data protection requirements.
• Execute controls related to PII and PHI data security as defined by policies and procedures.
• Review data handling practices and document observations related to privacy compliance.
• Support identification and documentation of data protection risks and incidents.

Identity and Access Governance

• Preform Identity and Access Management governance activities, including onboarding, offboarding, access reviews, and recertification processes.
• Review privileged access and MFA controls and document compliance status.
• Maintain access governance records and supporting evidence.

Standard duties

• Execute information security tasks in accordance with approved group playbooks and operational procedures.
• Perform security monitoring, vulnerability tracking, and compliance checks within assigned scope.
• Maintain GRC documentation, risk registers, and compliance trackers.
• Perform control testing and evidence collection activities for audits and regulatory reviews.
• Track information security risks and remediation actions and report status through defined channels.
• Document information security incidents, root causes, and corrective actions as assigned.
• Prepare technical and governance inputs used by management for security reporting.
• Apply ISMS processes and contribute to continuous improvement activities.
• Coordinate operationally with shared services teams to execute assigned security activities.
• Support incident tracking, root cause analysis (RCA), and corrective action plans (CAPA).
• Bachelor’s degree in information technology, Information Security, or a related field.
• 3–6 years of experience in information security, IT governance, risk, or compliance roles.
• Knowledge of information security standards and frameworks such as ISO 27001, ADHICS, NESA IA, COBIT, or similar.
• Relevant professional certifications (e.g., ISO 27001, CISA, Security+, or equivalent) are an advantage.
• Strong execution capability in information security and governance activities.
• Ability to perform detailed assessments and document findings accurately.
• Good understanding of security controls, risk management, and compliance requirements.
• Ability to work within defined procedures, playbooks, and escalation paths.
• Strong analytical and documentation skills.
• Effective communication skills for reporting findings and observations.