Data Governance

The Data Governance will report to the IT/ISMS manager to oversee, implement, and maintain the company’s information security management system (ISMS) in compliance with ISO/IEC 27001:2022 standards at Ban Vien Corp while also driving Data Governance initiatives to ensure data quality, consistency, and security. This position requires a strong understanding of security frameworks, risk management, data governance and the ability to make informed decisions to ensure operational security across all organizational systems.

Data Governance

• Collaborate with cross-functional teams to define and enforce Data Governance Policies that ensure the quality, consistency, and security of organizational data.

• Develop and manage a Data Classification Framework to categorize data based on sensitivity and criticality, ensuring alignment with security protocols.

• Oversee Data Lifecycle Management, including collection, storage, usage, retention, and disposal, to minimize risks and ensure compliance.

• Ensure adherence to data protection regulations such as GDPR, CCPA, and other relevant laws.

• Monitor and analyze data governance metrics to identify risks, gaps, or areas for improvement.

• Support organizational decision-making processes by providing insights derived from secure and well-governed data.

Information Security

• Implement standard security control frameworks/guidelines to ensure consistent application of information security controls.

• Identify potential threats and areas where existing cybersecurity procedures require improvement, or where new ones need to be developed.

• Perform security monitoring, vulnerability assessments, and incident log analysis to proactively detect and mitigate threats.

• Plan and conduct periodic security audits to validate compliance with security requirements.

• Provide subject matter expertise to ensure information security is integrated into all organizational systems and processes.

• Ensure appropriate incident handling procedures, including documenting and reporting security incidents.

• Bachelor’s degree in information technology, Cybersecurity, Data Management or a related field.

• Have experience in information security, data governance or similar role.

• Familiarity with ISO/IEC 27001:2022 standards and data governance frameworks.

SKILLS:

• Knowledge of security standards like ISO/IEC 27001, NIST, or equivalent frameworks.

• Experience working with computer networks and security systems.

• Expertise in Data Governance principles, including data classification, metadata management, and data quality assurance.

• Proficient in data protection regulations such as GDPR, CCPA, and local compliance requirements.

• Experience with security and data governance tools such as Collibra, Informatica, or similar platforms.

• Hands-on experience with security tools, frameworks, and risk assessment methodologies.

• Ability to think critically and identify risks.

• Strong problem-solving, analytical, and decision-making skills with the ability to manage complex risks.

• Excellent communication and teamwork abilities to engage stakeholders effectively.

NICE TO HAVE:

• Possession of relevant certifications such as CISSP, CISA, CEH, CDMP (Certified Data Management Professional), DGSP (Data Governance and Stewardship Professional), CompTIA Security+, CCNA/CCNP, Microsoft Azure, or AWS Certified.

• ISO/IEC 27001:2022 Internal Audit Awareness and Training Certificate.