Information Security Specialist

We're looking for an Information Security Specialist to be part of our Information Security team to Identify, define and mitigate TFG`s data privacy risks by developing an information protection lifecycle, with specific focus on create, store, use, share, archiving and destruction of sensitive data. With a robust strategy focusing on People, Process and Technology, we believe that our culture and the quality of our people are our greatest strengths. As such, we need to employ top talent to support our key business functions. TFG’s IT division provides innovative, strategic and cost-effective ICT solutions and professional services to TFG and its subsidiaries. Working for TFG means; working with highly talented professional individuals, who are passionate about collaboration, creativity and working towards successful customer service. The Key Performance Areas of this role will be as follows: ? Identify, define and mitigate TFG`s data privacy risks by developing an information protection lifecycle, with specific focus on create, store, use, share, archiving and destruction of sensitive data. ? Establish, maintain and monitor a data protection and privacy framework, including policies, procedures and other documentation. ? Manage the implementation of Information Security and IT solutions used in the overall Data Protection strategy ? Design and embed the integration of data protection responsibilities into appropriate business roles ? Provide prompt expert advice on existing and new purposes for processing personal data ? Work closely with the infrastructure and DEV teams to ensure non-production platforms use sanitized data by implementing appropriate controls and practices ? Lead on communication, awareness and training, building a strong brand associated with “the power of safe data use” (or similar) across the organisation. ? Provide guidance on incident and breach procedures in response to data breaches ? Define a process to deal professionally with requests for information and complaints that follows TFG’s current structures. ? Ensure data subjects, both customers and employees, are informed of their rights. ? Implement and maintain “privacy by design” across the business working closely with the PMO, architects, developers and BAs to ensure that the SDLC is updated accordingly as part of embedding information protection. Development of a compliance scorecard for our Infotec team. ? Manage all vendors/third parties providing information protection solutions’; including reviews of contracts or legal agreements ensuring privacy is addressed adequately. ? Conduct change management across TFG to support the required changes and implementations that data protection will require ? Develop: o Operational dashboards in order to improve people, process and technology performance. o Information protection dashboards linking back to money saved and or penalties avoided. o Undertake audits and checks to monitor