Data Protection Manager

Overview

Supports the team in ensuring operational compliance with the Personal Data Protection Act 2010 (PDPA). This role focuses on executing risk assessments, compliance monitoring, and day-to-day data privacy operations across the company. This role focuses on executing risk assessments, compliance monitoring, and day-to-day data privacy operations across the company.

Responsibilities

Compliance & Operational Support

• Internal Advisor: Provide day-to-day guidance to business units on personal data processing.
• Policy Monitoring: Oversight and implement data protection policies and SOPs across operations.
• Regulatory Support: Assist the DPO in acting as a point of contact for the PDPC and data subjects.

Risk Management & Mitigation

• DPIA Execution: Facilitate and execute Data Protection Impact Assessments (DPIA) for new systems and projects.
• Risk Reporting: Identify, document, and escalate operational data privacy risks to management.
• Emerging Tech: Assess privacy risks associated with new technologies like AI.

Incident & Request Management

• Breach Support: Assist in managing personal data breaches and compiling regulatory reports.
• Data Subject Requests: Handle data subject inquiries, complaints, and access requests timely.
• Awareness: Deliver PDPA training and foster a culture of privacy across the company.

Qualifications / Required Skills

• Bachelor’s Degree (Professional certification in privacy is a plus).
• 5+ years of experience in banking/financial compliance, with at least 2 years dedicated to handling PDPA matters.
• Strong operational knowledge of the Malaysian PDPA 2010 and experience executing risk assessments.