Data Governance (Privacy & Security) Expert

About the role

The Data Governance (Privacy & Security) Expert leads enterprise‑wide initiatives to protect sensitive information, ensure regulatory compliance, and embed privacy and security into business processes.

Key responsibilities

• Develop and maintain privacy governance frameworks, data protection controls, and information‑security policies.
• Conduct privacy impact assessments, data‑protection risk assessments, and support internal/external audits.
• Monitor compliance with privacy laws, regulatory standards, and contractual obligations.
• Collaborate with legal, compliance, operational and technical teams to embed privacy‑by‑design and security‑by‑design principles.
• Oversee data classification, encryption, retention, and secure disposal initiatives.
• Maintain enterprise data‑governance standards, metadata structures, and data‑quality controls.
• Produce governance, compliance, and risk‑management reports for leadership.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Management or related field.
• Minimum 15 years of experience in data privacy, information security, governance, and regulatory compliance, preferably in highly regulated environments such as healthcare.
• Proven track record of designing and implementing enterprise‑wide privacy and governance programs.

Required skills

• Strong knowledge of privacy and protection laws and frameworks (ISO 27001, ISO 27701, ISO 27018, NIST, CIS Benchmarks).
• Experience with cloud‑security environments and identity‑and‑access‑management technologies.
• Hands‑on use of data discovery, classification, and privacy‑management tools.
• Familiarity with unified data‑governance platforms and security‑monitoring solutions.