Business Analyst – Data Governance & Protection (Contract)

About the role

Vinova is seeking a Business Analyst to lead data governance, protection and security initiatives for its HPB projects. The role involves planning and executing data security risk management programs, collaborating with internal and external stakeholders, and supporting incident and enterprise data risk management to ensure compliance and safeguard data assets.

Key responsibilities

• Plan and conduct regular program activities and assessments related to Data Security Risk Management and Personal Data Protection to ensure compliance and risk mitigation.
• Collaborate with internal and external stakeholders to design and implement data sharing arrangements with appropriate data protection safeguards.
• Support Data Incident Management and Enterprise Data Risk Management activities to promptly address and mitigate data‑related risks.
• Review, formulate, and promote awareness of data standards, policies, frameworks, processes, procedures, and guidelines among relevant stakeholders.
• Serve as the primary liaison for Data Protection and Data Security queries between the organization and Government Agencies.
• Guide the integration of data protection, privacy, and security procedures into daily business operations to maintain compliance and operational integrity.
• Drive successful delivery of key outcomes through research, impact analysis, and defining and tracking success metrics to continuously improve data governance solutions.

Required profile

• Proven experience leading and delivering data governance, data protection, or data security initiatives.
• Experience formulating data policies, standards, frameworks, processes, and guidelines.
• Background in information and record management, including lifecycle management, data modelling, and master data management.
• Professional certifications in data governance, data protection, cybersecurity, data privacy, incident management, data analytics, business analytics, data science, or related fields.
• Familiarity with Singapore Government IM8 policies and data/cybersecurity practices.