Data Security Officer

About the role

The Data Security Officer will lead the analysis of data assets, evaluate existing controls, and ensure compliance throughout the data lifecycle. The role combines strategic oversight of data protection measures with hands‑on implementation of advanced access controls and virtualization techniques.

Key responsibilities

• Spearhead deployment of enhanced data access controls and advanced virtualization strategies.
• Integrate automated compliance checks into existing workflows and monitor their performance.
• Conduct regular risk assessments focused on data assets and access patterns.
• Maintain alignment with IM8 requirements, PSDSRC recommendations and relevant regulatory frameworks.
• Develop and update comprehensive data security policies and procedures.
• Evaluate organisational data usage patterns, identify virtualization opportunities, and streamline data access processes.
• Leverage Denodo’s capabilities and monitor emerging data security technologies for potential adoption.

Required profile

• CRISC certification is mandatory.
• Experience with ISO27001 certification, preferably as lead implementer or auditor.
• Background in Information Systems, IT, Computer Engineering, Risk Analytics or related fields.
• Familiarity with data access controls, data lifecycle management and compliance frameworks.
• Strong analytical, problem‑solving and communication skills.
• Ability to work independently and collaboratively within a team.

Required skills

• CRISC certification
• ISO27001 certification (lead implementer or auditor)
• Denodo data virtualization platform

What we offer

• In‑house and external learning and development opportunities.
• Structured job rotation programme for exposure to diverse statistical work.
• Mid‑year and year‑end variable payments plus market‑adjustment component.
• Flexible working arrangements, including hybrid work and staggered hours.