Data Security Advisor

Data Security Advisor
Location: Montréal, Ottawa or Toronto
Duration: 6 Months

PROJECT REQUIREMENTS
Data Security includes the planning, development, and execution of security policies and procedures to provide proper authentication, authorization, access, and auditing of data and information assets. The goal of data security practices is to protect information assets in alignment with privacy and confidentiality regulations, contractual agreements, and business requirements.
Our client needs data security advisory to support the data protection activities of the organization, from audience data to business analytics, from personal data to facilities data.

Data security needs include :

• Align on Data Governance activities
•  A number of reporting obligations, be these financial, regulatory and statutory require common data sets, flowing from common or standardized data practices.
• Cybersecurity and corporate-wide data protection standards are also required. The Technology & Infrastructure group (T&I) is leading most of these mission critical items around data storage and cybersecurity.

Activities:

• Document data protection requirements per sensitivity levels
• Document the security controls required to efficiently protect sensitive data
• Work with security awareness experts and data governance coordinator to develop guides and procedures for the end-users to help them integrate data protection requirements into their daily activities
• Lead the implementation of the data security controls from a people, process and tools perspective
• Work with all the Information Security team members to develop procedures and configure existing or new security solutions based on the data security needs (i.e. : SIEM monitoring, CASB monitoring, DLP solutions configuration, …)
• Attend committee meetings on Data to present a status of data security
• Work with the Privacy Office to ensure data protection tools are aligned with privacy regulations, policies, directives and guidelines
• Maintain relationships with designated/ad hoc data stewards to ensure data protection controls are in place across the organization
• Maintain a strong alignment with Data Governance activities

Required Qualifications:

• Strong and recognized expertise in data protection, data-driven decision making and data governance
• Experience of implementing a data security strategy
• Effective communicator in both official languages (French and English)
• Expected to produce documents for and engage in discussions with middle management
• Strong and recognized leadership experience in large organizations
• At least 10 years of experience in data security related activities
• Excellent soft skills, self-starter
• Certifications in Information Security (CISSP, CISM, CISA, or equivalent)
•  An asset : Certification in Privacy