Data Breach Incident Response Manager

Job Description

*Make an impact every day with Trust, Data and Resilience (TDR)Our TDR team sits within the Group Operations function and is responsible for mission-critical areas including cyber, information, data, privacy and resilience. These are challenges that impact our clients globally. Our TDR team develops the platforms, drives the processes and builds partnerships to benefit millions of people every day. They thrive in providing solutions to complex issues, devote time and energy to designing new and innovative solutions, and all in an environment that demands being risk-aware, not risk-averse. TDR chooses progress over perfection and aims to always participate with a constructive purpose. The team makes an impact wherever they are based, be it in our offices around the world, our Global Business Solution centres in China, India, Malaysia and Poland, or even from our home.Now you have an opportunity to make a meaningful impact with a diverse and passionate team of creators, innovators and achievers. With us, you ll learn, be inspired, and make an impact every day. The success of our work hinges on how we use the unique diversity of our people to realise the effects we seek to achieve: Always on. Always safe. Always Simple.We are searching for a strong privacy professional preferably with demonstrated experience handling data breaches and basic working knowledge of IT Security Risk Management principles.This role will be responsible for the effective handling of all suspected and actual data breaches involving both personal and non-personal data and will:

• support the businesses and functions & 2nd line compliance, through the provision of effective service delivery model to drive operational excellence (including effective project and change management) in respect of data management, data privacy & records management capabilities.
• work internally with Head-ICS & Risk assurance teams, business & functions partners & 2nd line compliance colleagues to design, implement & operationalise capabilities for Data Management, Privacy & Records Management.
• provide timely feedback / data to all stakeholders to meet any key regulatory obligations and key business priorities.

This position reports directly to the Director, Data Breach Response Operations (Singapore). Key Responsibilities

• Provide timely and accurate assistance to internal stakeholders in relation to data breach incidents;
• Case manage incidents reported into the Data Breach Portal to drive resolution within established timeframes;
• Liaise with Incident Owners, Compliance and Risk teams attached to a data breach incident in order to drive a decision on reportability (to the regulator and the impacted party) within 72hours.
• Generate reports and give analytical feedback in relation to incidents logged within the portal;
• Identify data breach trends in order to identify potential issues (systemic or otherwise) requiring corrective actions;
• Build and sustain partnership with security stakeholders to maintain a collaborative environment;
• Provide mentorship and technical guidance to less experienced data breach responders and staff within Businesses and Functions handling suspected data breached.
• Provide support or guidance to the Awareness Team with improving or developing SCB s Security Training material as it relates to user awareness on data privacy and banking secrecy.
• Adhere to establish processes for reporting and receiving information regarding incidents;
• Monitor logged incidents and prescribed corrective actions pursuant to incident containment and recovery in order for incidents to be closed .
• Provide advice/guidance to stakeholders on data breach requirements and considerations for reporting.
• Assist in the development of policy and guidance to drive efficiencies within the data breach management processes established.
• Participate as a subject matter expert in incident response meetings with key stakeholders and executive bank staff.
• Provide thought leader-level knowledge with, and/or a proven record of success directing efforts in incident handling processes
• Assist in the creation of operational plans and reports for business and functions in respect of data breach management,
• Prepare breach response processes to address various breach scenarios
• Advise internal business partners on security best practices and breach mitigation strategies
• Actively participate within SCB Crisis Response Community Participate in seeking out other opportunities to build unified processes across all Incident Management/Crisis Response sub-domains
• Provide ad-hoc advice and guidance in relation to data breach and privacy related processes as required;
• Support the Data & Privacy Operations mission

Skills

• General knowledge of incident response processes and management reporting
• The ability to persuade senior management within the Group in respect of required actions, to aid in the pursuit of BAU outcomes
• Strong attention to detail and the ability to conduct root cause analysis
• The ability to understand, analyse and interpret legislative requirements outlined
• Experience responding to the business and/or regulatory environment by proactively recommending changes to policies and procedures
• Ability to prioritise between multiple complex projects/timelines
• Possess excellent written and oral communication skills
• Excellent stakeholder and relationship management with the ability to build strong relationships in order to leverage resources outside of direct control to achieve goals
• Foster an agile, high-performance, collaborative culture which is creative, open, supportive and dynamic with high levels of continuous improvement mind-set. Operational Excellence & Quality

Qualifications (demonstrated competence):

• Demonstrated experience in Data Breach Response, or Incident Response
• Knowledge and hands-on experience in breach notification and privacy laws around data breach scenarios.
• Demonstrated experience handling and investigating sensitive matters requiring investigation.
• Demonstrated experience designing and implementation data breach processes and capability, or other investigation processes.
• Proven ability to build relationships with and understand the business needs of customers
• Proven ability to build strong working relationships with colleagues and partner organizations
• Tertiary qualification in Business Administration, Information Technology or Computer Science, Law or related field.

Please note the ideal candidate will be able to demonstrate a mix of experience in two or more of the following: privacy or other compliance field, risk management and IT Security Risk Management, stakeholder engagement is preferred for this position.A bank with a soulWe are a global bank which is big enough to be relevant to the world s most sophisticated corporations but small enough to be local, nimble and innovate. We tap into our DNA as a global trade bank, committing to the dynamic markets where we have operated for over 150 years. We link these markets with each other, as well as to Europe and the Americas, to help our corporate and institutional clients manage their global investing and financing needs.In addition, we use our deep knowledge in local markets to help our customers and clients grow, invest and protect their wealth.Our unrivalled network and unique culture make this organisation special and creates opportunities for unparalleled career and development experiences. The success of the Bank hinges on how we harness our unique strengths, create an inclusive and flexible environment, and where our people feel empowered to use the freedom and accountability that we give them to go above and beyond for our customersWe believe that every one of our colleagues plays a tangible role in delivering our purpose and we all feel strongly about living our valued behaviours and our brand promise Here for good.,

Keyskills :
customer relations3rd party relationshipsmeeting facilitationbuild strong relationshipsproposal writingroot cause analysisdeliveryrecord of successincident managementpolymerase chain reaction pcr