Data Security, Protection

**Atradius** The Atradius Group provides trade credit insurance, surety and collections services worldwide, and has a presence through 160 offices in 52 countries. The products offered by Atradius protect companies around the world against the default risks associated with selling goods and services on credit. **Department Description** As the Data Security, Protection & Privacy Manager, you work in the _Enterprise Data Defence_ team, which operates within the **Enterprise Data Function**. You are part of the _first line of defence_ and work on operationalisation of data security, privacy, and data protection measures within the organisation. This role requires solid understanding of data protection regulations (e.g. GDPR), data security best practices, as well as the management of data risks, including management of data incidents. As the Data Security, Protection & Privacy Manager, your primary goals are: - Ensure adequate governance and mechanisms are in place to safeguard personal data and commercially sensitive data assets. - Ensure data risks are appropriately identified and managed. - Ensure compliance with relevant data legislation and regulation for Atradius and its global offices. - Support the Head of Enterprise Data Function with implementation of Data Strategy. **In this position your key responsibilities will be**: - Design and development of governance documentation (Access Management, Data Sharing, Data Storage, Data Loss Prevention, Data Encryption, Anonymisation, etc) to help support safeguarding of data assets. - Consolidation and streamlining of security, privacy, and protection efforts to ensure better data security and protection outcomes. - Support maintenance of data protection and security metadata in the appropriate register, i.e. _Records of Processing Activities_. - Work with the enterprise to provide risk-based data security and protection advice and support to enable _data protection by design_. - Operate the _Data Incident Management process_, including end-to-end management of the process, maintenance of a register, as well as overseeing the implementation of mitigation and preventative measures. - Work closely with the _Information Security_ team to ensure adequate technical controls are in place to protect the data. - Work in collaboration with the _Enterprise Data Partner_ to ensure data security and protection requirements are adequately met by the Portfolio. - Cooperate with the _second line of defence_ and the _Data protection Officer_ in relation to the management of data risks and compliance with relevant regulation. - Inform the Data Governance team of the latest trends and developments in data security, privacy, and protection. **Required qualifications**: - Bachelor’s or Master’s degree: Information Security, Law or any business-related field. - Minimum of 7 years of experience in data security, privacy, and protection, with at least 3 years in implementation and/or operations. - Relevant certifications (e.g., CISSP, CISM, CIPP) are highly valued. - Strong knowledge of data protection regulations and standards (e.g., GDPR, ISO 27001) and ability to operationalise them. - Experience in designing and implementing policies, standards, and guidelines for data topics. - Autonomous, proactive and a finisher. - Effective communication skills and ability to collaborate and influence stakeholders at various levels of the organisation. - Familiarity with data security and protection technologies (e.g., encryption, masking, etc). - Fluent in English and Spanish, both spoken and written. - Ability to travel occasionally (