OneTrust 数据治理与安全专员 - 2870
OneTrust Data Governance & Security Specialist - 2870
寻找经验丰富的OneTrust安全与治理专家，远程工作地点在墨西哥城
我们正在寻找一位拥有至少7年经验的OneTrust安全与治理专家，加入一家领先机构内的活力团队。该职位涉及将OneTrust平台作为企业数据治理计划中的政策和证据层进行实施和运营，重点关注数据发现、隐私、合规、安全和治理。
主要职责：
根据隐私和合规计划实施和配置OneTrust模块。
上线数据源，定义扫描范围和频率，并调整数据分类。
构建和维护数据地图和处理活动记录（RoPA）。
配置数据策略，监控违规行为，并推动整改至完成。
协调数据控制的实施，如掩码、过滤、加密和访问限制。
配置和操作评估、DSAR、事件、同意和隐私工作流。
为审计和认证实施控制框架和证据收集。
设计和维护与周边生态系统的集成，特别是Informatica。
将监管和政策要求转化为OneTrust平台配置。
提供L2和L3支持，排查扫描、集成、工作流和权限问题。
所需技术技能：
拥有超过7年的OneTrust安全与治理专家经验，您必须熟练掌握以下技术技能：
OneTrust、数据发现和数据治理。
OneTrust数据使用治理和控制执行。
隐私自动化、RoPA、PIA、DPIA、TIA、DSAR、事件和泄露管理，以及同意管理。
包括ISO 27001、ISO 27701、SOC 2和NIST CSF在内的风险与合规框架。
OneTrust REST API和webhooks用于自动化和集成。
集成OneTrust与Informatica目录的经验。
了解AWS数据环境，包括S3、Redshift、RDS和Oracle。
了解Denodo和数据虚拟化层。
使用ITSM和协作工具的经验，如ServiceNow、Jira、Slack或Teams。
熟悉GDPR、CCPA、CPRA、LGPD、隐私设计和数据最小化。
了解数据保护技术，包括分类、掩码、令牌化、加密、RBAC和ABAC。
SQL和基本的Python或脚本语言，用于验证、对账和自动化。
资格：
学士学位
查看英文原文
Seeking Experienced OneTrust Security and Governance Specialists for Exciting Projects Remote in Mexico City
We are looking for an experienced OneTrust Security and Governance Specialist with a minimum of 7 years of experience to join a dynamic team within a leading organization. This role involves implementing and operating the OneTrust platform as the policy and evidence layer of an enterprise data governance program, with a focus on data discovery, privacy, compliance, security, and governance.
Key Responsibilities:
Implement and configure OneTrust modules according to privacy and compliance programs.
Onboard data sources, define scan scope and cadence, and tune data classification.
Build and maintain data maps and Records of Processing Activities (RoPA).
Configure data policies, monitor violations, and drive remediation to closure.
Coordinate the application of data controls such as masking, filtering, encryption, and access restrictions.
Configure and operate assessment, DSAR, incident, consent, and privacy workflows.
Implement control frameworks and evidence collection for audits and certifications.
Design and maintain integrations with the surrounding ecosystem, particularly Informatica.
Translate regulatory and policy requirements into OneTrust platform configurations.
Provide L2 and L3 support, troubleshooting scan, integration, workflow, and permission issues.
Technical Skills Required:
With over 7 years of experience as a OneTrust Security and Governance Specialist, you must be proficient in the following technical skills:
OneTrust, Data Discovery, and Data Governance.
OneTrust Data Use Governance and Control Enforcement.
Privacy Automation, RoPA, PIA, DPIA, TIA, DSAR, Incident and Breach Management, and Consent Management.
Risk & Compliance frameworks including ISO 27001, ISO 27701, SOC 2, and NIST CSF.
OneTrust REST APIs and webhooks for automation and integrations.
Experience integrating OneTrust with Informatica catalogs.
Knowledge of AWS data environments including S3, Redshift, RDS, and Oracle.
Knowledge of Denodo and data virtualization layers.
Experience with ITSM and collaboration tools such as ServiceNow, Jira, Slack, or Teams.
Working knowledge of GDPR, CCPA, CPRA, LGPD, privacy by design, and data minimization.
Knowledge of data protection techniques including classification, masking, tokenization, encryption, RBAC, and ABAC.
SQL and basic Python or scripting for validation, reconciliation, and automation.
Qualifications:
Bachelor’s degree or higher.
Working proficiency in English and Spanish, written and spoken.
Excellent communication, empathy, commitment, leadership, and teamwork skills.
OneTrust platform certifications are desirable.
IAPP CIPP/E, CIPP/US, CIPM, or CIPT certifications are desirable.
ISO 27001 Lead Implementer or Lead Auditor certification is desirable.
Location & Schedule:
Remote work from Mexico City, Mexico.
Work hours Monday to Friday, 09:00 – 18:00.
English and Spanish skills are required.
Benefits:
- Attractive Salary + Premium Benefits
- Performance bonuses, grocery coupons, and savings are found.
- Aguinaldo, premium vacations, and vacations paid
- SGMM Medical insurance, family, and Life insurance.
Candidates must include their compensation expectations in their applications and resumes in English.
Interested? Apply now through this link:
·
Originally posted on Himalayas