Data GovernanceCÔNG TY CP BẢN VIÊN

The Data Governance will report to the IT/ISMS manager to oversee, implement, and maintain the company's information security management system (ISMS) in compliance with ISO/IEC 27001:2022 standards at Ban Vien Corp while also driving Data Governance initiatives to ensure data quality, consistency, and security. This position requires a strong understanding of security frameworks, risk management, data governance and the ability to make informed decisions to ensure operational security across all organizational systems.
Data Governance
• Collaborate with cross-functional teams to define and enforce Data Governance Policies that ensure the quality, consistency, and security of organizational data.
• Develop and manage a Data Classification Framework to categorize data based on sensitivity and criticality, ensuring alignment with security protocols.
• Oversee Data Lifecycle Management, including collection, storage, usage, retention, and disposal, to minimize risks and ensure compliance.
• Ensure adherence to data protection regulations such as GDPR, CCPA, and other relevant laws.
• Monitor and analyze data governance metrics to identify risks, gaps, or areas for improvement.
• Support organizational decision-making processes by providing insights derived from secure and well-governed data.
Information Security
• Implement standard security control frameworks/guidelines to ensure consistent application of information security controls.
• Identify potential threats and areas where existing cybersecurity procedures require improvement, or where new ones need to be developed.
• Perform security monitoring, vulnerability assessments, and incident log analysis to proactively detect and mitigate threats.
• Plan and conduct periodic security audits to validate compliance with security requirements.
• Provide subject matter expertise to ensure information security is integrated into all organizational systems and processes.
• Ensure appropriate incident handling procedures, including documenting and reporting security incidents.