Data Protection And Information Security Analyst

Job Description
The Data Protection and Information Security Analyst supports both internal operations and customer-facing engagements in ensuring compliance with the Personal Data Protection Act (PDPA) 2022, maintaining information security controls in line with ISO 27001, and protecting the confidentiality, integrity, and availability of information assets. The role involves monitoring, assessing, and improving data protection and information security practices across clients and within the organization, managing incidents, and conducting training and awareness initiatives to strengthen overall compliance and security posture.

Key Responsibilities

Support the implementation and maintenance of the organization’s data protection framework.
Assist in developing and maintaining the Record of Processing Activities (ROPA).
Conduct regular Data Protection Impact Assessments (DPIAs) and advise departments on mitigating privacy risks.
Review data processing agreements and contracts to ensure compliance with PDPA 2022 requirements.
Assist in responding to data subject access requests (DSARs) and managing privacy incidents or breaches.

Monitor data transfer activities to ensure compliance with cross-border data flow restrictions.

Support the DPO in preparing periodic compliance and audit reports for management and regulators.

Implement, monitor, and continually improve information security controls under the Integrated Management System (IMS) aligned with ISO 9001:2015 and ISO/IEC 27001:2022 standards.

Conduct risk assessments and support the development of mitigation plans.

Participate in vulnerability assessments and coordinate with relevant teams for remediation.

Monitor system logs, alerts, and incidents to detect and respond to security threats.

Support in developing and maintaining the Information Security Management System (ISMS) documentation.