Consultancy Services Data Protection and Data Security Audit

Qualifications

• Minimum 5 years of relevant professional experience in IT audit, data security, or data protection
• Experience in assessing security controls (e.g. access management, encryption, monitoring)
• Familiarity with recognised data protection and security frameworks (e.g. GDPR, ISO 27001, NIST or equivalent)
• Strong analytical and reporting skills

Skills, Knowledge, Experience Required

• Minimum 5 years of relevant professional experience in IT audit, data security, or data protection
• Experience in assessing security controls (e.g. access management, encryption, monitoring)
• Familiarity with recognised data protection and security frameworks (e.g. GDPR, ISO 27001, NIST or equivalent)
• Strong analytical and reporting skills

Duties/Role

• Relevant certifications (e.g. CISA, CISSP, ISO 27001)
• Experience in international organizations or similar environments

Duties/Role (data protection governance and controls)

• Assessing the data protection governance structure, including roles and responsibilities of key stakeholders (e.g. DPO, management, operational teams)
• Reviewing the existence, completeness, and adequacy of data protection policies, procedures, and standards
• Evaluating alignment with applicable regulatory requirements and internal policies
• Assessing logical access controls and user access management
• Reviewing encryption mechanisms (data at rest and in transit)
• Evaluating data loss prevention (DLP) measures
• Reviewing logging, monitoring, and detection of unauthorised activities
• Assessing data classification and handling of sensitive and confidential information
• Reviewing data retention and secure disposal practices
• Evaluating controls over data sharing, including third-party arrangements
• Reviewing processes for detecting, reporting, and responding to incidents
• Assessing escalation and communication mechanisms
• Evaluating monitoring and tracking of security incidents
• Assessing alignment with internationally recognised data protection principles (including, where relevant, standards comparable to GDPR and frameworks applicable to international organisations)
• Reviewing awareness and training initiatives related to data protection and confidentiality

Deadline

11/06/2026

Additional information

If you are interested, for further information, please contact the point of contact for this offer.