• Design and implement secure data architectures, including data classification, access controls, encryption, and data masking strategies.
• Implement data security and privacy measures to ensure the protection of sensitive data.
• Conduct risk assessments to identify and mitigate vulnerabilities in data storage, processing, and transmission based on data sensitivity classification.
• Implement and maintain data security controls including access control lists role-based access control, and data encryption solutions.
• Provides guidance and expertise on data security best practices by advising data owners and other stakeholders on data security best practices in general including data classification and data privacy.
• Monitor and analyze security logs and alerts to detect potential data security incidents.
• Investigate and respond to data security incidents, including containment, eradication, and recovery activities.
• Ensure compliance with relevant data security regulations and standards (e.g., NIA, QCSF, Privacy Law).
• Assist with security audits and assessments.
• Develop and maintain documentation on data security policies, procedures, and controls.
• Stay up-to-date on emerging security threats and trends, and proactively implement mitigation strategies.
• Participate in advising and coaching of NPC team on Security best practices, technologies and processes related to scope of work.