Data Protection Specialist
Core
Build and maintain relationships with IT and business leaders to understand goals, explain security requirements, identify risks, and assess controls to verify data protection safeguards.
Role type
Senior IC data protection and information security specialist
Builds
Security controls, policies, procedures, and compliance initiatives for a global pharmaceutical organization
Domain
Healthcare / Life Sciences + Information Security & Data Privacy
Required skills
Information security control frameworks (NIST, ISO 2700X, PCI-DSS, SWIFT, Cloud Controls Matrix, HITRUST, NIST 800-171, CIS Controls), Global and regional data privacy regulations (GDPR, HIPAA, CCPA), Policy and procedure development, Third-party vendor security assessment, AI tool usage for control assurance, Project management
Preferred skills
CISM, CIPT certification, Experience at a large global organization
Technologies
AI, Cloud Matrix, Security Swift, Support LESS
Responsibilities
Build and maintain relationships with IT and business leaders to understand goals and programs; Assess controls to verify data protection safeguards are in place; Use AI to analyze file-labeling data, application logs, and infrastructure datasets to automate control assurance; Evaluate third-party vendors security posture, remediation needs, and compensating controls; Develop expertise in information security policies and advise internal groups including Commercial, R&D, Audit, Legal, and Purchasing; Report potential data privacy risks and planned remediation to management; Review technology and information policies and practices for relevance to commercial and R&D programs and recommend improvements.