글로벌 유통 대기업에서  “Information Security and Data Privacy Leader ” 포지션을 찾고 있습니다.

Digital팀에 소속되어 Country Retail Manager에게 보고하며, Country Digital Manager에게 dotted line으로 보고하는 포지션입니다.

Candidate Preferred profile

• 전공 유관자 : 관련 전공 Preferred (데이터 보안, 정보 보안)
• 유관/선호 대학 : N/A
• 경력연차 : 7~10년 (과차장급)
• 관련 선호 경력 : 외국계 근무 경험 선호, 고객정보 보안관리 담당 경험 선호
• 영어 커뮤니케이션 수준 : 상 (지사장님 및 글로벌과 커뮤니케이션이 가능한 정도의 영어능숙도가 필요합니다 )
• 연봉 구간 (시작점~ Max까지) : 70,000 ~ 95,000 사이 (후보자 경력연차/ 역량 고려하여 협의 가능함)

[OO Korea] Information Security and Data Privacy Leader

WHO YOU ARE 

As a person you are motivated to lead the organisation in understanding the value that the function brings and how it makes a positive contribution to the business objectives. You strive for being able to provide real business value driving the protection and compliance of country information assets. Our Client Business and our values and how they apply to Information Security and Data Privacy is your passion. Furthermore, you enjoy solving potential business risks by mitigating non-compliance by using your expertise to identify relevant IT security and privacy controls and you have the energy to keep up-to-date with changing legislation, to interpret the applicability to the country and learning new security technologies and methods.

In this role you have at least 4 years’ experience working directly with Data Privacy (projects/ programmes) and 5 years’ experience working with IT Security, demonstrating a working knowledge of which security controls can mitigate certain risks. We think you have CIPP/x or equivalent qualification, strong knowledge in industry standards, such as ISO27001, NIST, etc. and expert knowledge of data privacy legislation and what controls are needed to secure compliance. You also possess knowledge in the risk management process, ability to perform risk assessments and to advise on needed IT mitigating controls. In addition, you have proven ability to influence stakeholders and promote the business benefits of Data Privacy and effective security controls as well as background working within the area of Information Security and preferably also Information Technology.

You have knowledge in following areas:

• expert and proven knowledge of local Data Privacy legislation as a CISO and DPO responsible and how this impacts business operations
• expert and proven knowledge of IT Security controls and industry best practices in IT security
• solid understanding of Privacy by Design and how to operationalise this concept within the local country
• good knowledge of and in implementing Security by Design into an organisation
• broad knowledge of potential information risks for the country organisation, its co-workers, customers and suppliers and how Information Security can mitigate these risks
• good knowledge of IKEA business processes and governance structures
• good knowledge of IT solutions at Ingka
• good knowledge of and proven experience with the Risk Management Process, performing risk assessments and be able to advise and support mitigating actions

We believe that you are able to lead your organisation in implementing Information Security and Data Privacy requirements as well as to provide subject matter expertise to country stakeholders, ensuring they have the needed support and information available to identify and manage information and data privacy risks. You also have the ability to coordinate activities across a variety of stakeholders and to act with personal integrity, discretion, reliability and flexibility being a trusted business partner. In addition, you can communicate in an enthusiastic and engaging manner, adjusting the message and method depending on the target group. An ability to support with and interpret the results of technical security audits is in your scope.

YOUR RESPONSIBILITIES

As an Information Security and Data Privacy Leader you will implement the Information Security and Data Privacy strategy in the country and drive compliance to relevant internal steering documents and regulatory requirements in Information Security and Data Privacy in the country organisation in order to protect the brand. You will also operationalise Privacy by Design procedures and embed a Privacy by Design culture in the country. Moreover, you will support the Information and Business Process owners to implement the necessary Information Security requirements into their process or solution.

You will:

• secure the effective implementation of the Group Information Security and Data Privacy strategy and common Group Digital goals in your country
• be a key business partner, securing the ‘Security and Privacy by Design’ concept and integrating the function into business processes
• lead change in the local organisation to develop Data Privacy maturity and governance, and in creating an information risk aware culture
• secure the use of the mandatory learning solutions throughout the organisation, collaborating with the Competence Development team to ensure effectiveness
• have accountability for the Information Security and Data Privacy incident management process, supporting with contact with local regulators and/or individuals, decision material and escalations as required
• be the speaking partner to the business for day to day Data Privacy issues, to enable successful navigation and compliance with our steering documents and local Data Privacy legislation

ABOUT THIS WORK AREA

To be the local business partner responsible for Digital, while working as a seamless part of the global Ingka Group Digital organization. Ensure our client Digital products and platforms are delivered with excellence to meet the needs of customers and co-workers in order to enhance the whole our client shopping experience.

To secure effective Information Technology (IT) that supports our client business processes by maintaining, developing and supporting reliable, robust and efficient Digital products and platforms. Country Group Digital contributes to the growth of IKEA and improves the customer´s life at home. Country Digital also works together with all functions to ensure co-workers have the Digital tools and capabilities they need to do their best work.

Ensure Digital deployments are done with excellence and in coordination with Central Group Digital (Central) and all other country functions.