Cyber Risk : Information Protection and Data Governance (Manager)
About this position
The Cyber Risk Manager will be responsible for translating data protection and privacy requirements into business processes, developing legal and operational mechanisms, advising on risks, and building industry knowledge.
Responsibilities
• Translate data protection and privacy requirements into business processes, scenarios and project implementations for clients
• Design legal and operational mechanisms for clients on various aspects of personal data and privacy
• Develop data protection and privacy services in Thailand
• Advise on legal, operational, and technical risks and put in place mitigating controls
• Apply problem-solving skills in line with Deloitte methodology
• Develop oral and written communication skills to establish working relationships with clients
• Build industry knowledge to understand data protection, data governance, and privacy issues relevant to specific business activities and technologies
Requirements
• Bachelor or Master degree preferably in Computer Engineering, Computer Science, Information Systems, Accounting Information Systems or related fields
• At least 7 years of experience in related field on DLP
• Familiarity with standards, frameworks, and privacy laws such as ISO/IEC 27701, ISO/IEC 27001, COBIT, ITIL, GDPR, PDPA
• Holding one or more professional certifications e.g. CIPP/E, CIPP/A, CDMP, CIPM, CIPT, CISSP, CISM, CISA, ISO/IEC 27001
• Experienced in Data Loss Protection, Data Classification, Data Governance, and/or Privacy
• Good analytical and decision-making skills supported by clear communication in Thai & English and presentation skills
• Out-of-the-box thinking to help clients address data protection and privacy challenges in Thailand and across Asia
Benefits
100,000 - 250,000 THB per month