Data & Digital Records (Cyber Security)

• Data Classification and Protection Strategies: Implement and maintain data classification frameworks to categorize data and digital records based on sensitivity and criticality. Develop and enforce policies for data handling, encryption, and access controls to ensure appropriate protection measures are applied based on data classification
• The ideal candidate will have in-depth knowledge of Microsoft Purview compliance features, including data loss prevention (DLP), eDiscovery, insider risk management, and information governance. They will be responsible for optimizing compliance settings, implementing best practices, and ensuring the organization's regulatory and data protection requirements are met.
• Data Risk Assessment and Mitigation: Conduct thorough risk assessments related to the management, storage, and processing of data and digital records. Identify potential risks, such as unauthorized access, data breaches, and data loss, and develop strategies to mitigate these risks while ensuring data integrity and confidentiality.
• Compliance and Regulatory Adherence: Ensure that all data and digital records management practices comply with relevant regulations, such as GDPR, HIPAA, or industry-specific standards. Monitor changes in regulatory requirements and update policies and procedures accordingly to maintain compliance and reduce legal risks.
• Digital Records Management Lifecycle: Oversee the entire lifecycle of digital records, from creation and storage to archiving and secure disposal. Ensure that records are managed according to best practices and organizational policies, minimizing the risk of unauthorized access or data loss throughout their lifecycle.

• At least 7 years of experience in a related field.
• Experience of working with a Manufacturing company.
• Knowledge of risk management principles and methodologies.
• Excellent communication and leadership skills 
• Ability to work collaboratively with various departments and sites within the organization. 
• Ability to communicate complex technical challenges in a non-technical.
• Ability to simplify regulatory and compliance requirements. 
• Understanding of some or either of the following control frameworks: ISO 27001, CIS Controls, NIST or IEC-62443.
• Ability to prioritize, manage multiple projects, and execute in a fast-paced environment with a strong work ethic and ownership mentality.
• Self-motivated and able to work independently.
• Discretion, maturity, and professionalism to deal with sensitive matters. 
• Bachelor's degree in a related field (e.g. Engineering, Automation, Computer Science, or Management Information Systems)
• Technical risk management certification (e.g. Microsoft Certified: Information Protection and Compliance Administrator Associate) is a bonus.
• Microsoft Applied Skills: Implement retention, eDiscovery, and Communication Compliance in Microsoft Purview

• You help save lives - Every day is meaningful as we produce life-saving medicines
• Family values - Long-term perspective for employees and relationships 
• Be rewarded with an attractive salary and benefits package
• You will have a high level of influence where you can make a difference and leave your footprint
• Work with skilled and fun colleagues in a relatively informal organization
• Skills development - We offer various internal and external employee and leadership trainings, trainee programs and digital solutions

The Cyber Security team wish to welcome an aspiring candidate as part of our small team to make a positive impact on our expanded goals in Data and Digital Records.

If you proceed in the process