Data Security

**__**

Join us to protect the digital future of our organization and the resilience of our operations

The Data Security & Privacy Analyst is responsible for designing, implementing, and maintaining robust data security and privacy solutions to protect our organization’s sensitive information. You will collaborate with cross-functional teams to develop best practices, ensure compliance with relevant regulations, and foster a culture of security awareness throughout the company.
- MAIN RESPONSIBILITIES_

Data Protection Strategy & Implementation
- Develop and maintain the organization’s data security and privacy strategy.
- Implement and oversee data protection technologies (e.g., encryption, data loss prevention, access controls) to safeguard sensitive information.
- Conduct data security risk assessments and recommend improvements.

Privacy Compliance
- Ensure compliance with applicable privacy regulations and frameworks (GDPR, CCPA, HIPAA, etc.).
- Collaborate with legal and compliance teams to interpret and implement regulatory requirements.
- Contribute to the development and maintenance of privacy policies, standards, and guidelines.

Risk Assessment & Management
- Perform periodic vulnerability assessments and privacy impact assessments (PIAs) on data stores and data flows.
- Identify, document, and track remediation of security and privacy risks.
- Stay current with emerging threats, vulnerabilities, and regulatory changes that affect data security.

Incident Response & Investigation
- Develop, maintain, and test incident response plans focused on data breaches and privacy incidents.
- Investigate and respond to data security or privacy incidents, coordinating with key stakeholders to remediate issues.
- Implement lessons learned and ensure continuous improvement of incident response processes.

Collaboration & Advisory
- Provide guidance and best practices to software engineering, infrastructure, and product teams on secure data handling.
- Partner with Data Governance and IT teams to establish robust data classification and data retention policies.
- Educate and train employees on data security and privacy responsibilities and best practices.

Monitoring & Reporting
- Implement data security monitoring tools and processes to detect unauthorized access or anomalies.
- Generate regular reports for senior management on data security posture, risks, and compliance status.
- Recommend strategic initiatives to improve overall data protection maturity.
- QUALIFICATIONS_
- Bachelor’s in computer science or equivalent.
- Industry certifications such as CompTIA Security+, CISSP, CIPT, CIPP or GIAC are an asset.
- Experience working with privacy regulations (e.g., GDPR, CCPA) is an advantage.
- EXPERIENCE_
- 5 years of experience related to the field of Cyber Security with a focus on Data Security.
- SKILLS AND ABILITIES_

**Technical skills**
- Proficiency with data security tools (encryption, tokenization, DLP, etc.).
- Understanding of data lifecycle management and data classification methodologies.
- Knowledge of relevant security standards (ISO 27001, NIST, CIS Controls) and privacy frameworks.
- Knowledge in asset classification and risk management frameworks.

Non-Technical
- Requires strong customer focus, organizational skills, ethic, and adaptability to change.
- Result oriented with a commitment on team success.
- Good communication skills with technical stakeholders and comfortable with non-technical stakeholders.
- Analytical and problem-solving mindset.
- Ability to work under pressure during critical incidents.
- Team player and ability to collaborate with multidisciplinary teams.
- LANGUAGES_
- Fluent in English and French (written and spoken)
- Able to read and write technical documentation for all domains related to data management, able to communicate professionally with technical and non-technical in English.

**A job at Kruger means**:
**Competitive Compensation**

**Stimulating Work Environment**

**Wide Range of Benefits**

**Numerous Growth Opportunities