Data Protection Officer

About this Role:

Join our team as a PDPA & Privacy professional and play a key role in driving privacy compliance and data protection across the organization. You will advise management and business teams on PDPA matters, oversee privacy risks and data protection activities, and support key initiatives including DSAR, data breach management, LIA/DPIA, Ropa, and privacy policies.

You will also serve as Secretary to the Data Protection Committee (DPC), lead PDPA awareness initiatives, and coordinate with the PDPC to ensure the organization stays compliant and up to date with regulatory requirements.

Key Responsibilities:

• Advise management and business functions on PDPA compliance and privacy-related matters.
• Monitor compliance with PDPA, internal privacy policies, and data protection requirements.
• Manage and oversee Data Subject Rights Requests (DSAR) and personal data breach incidents.
• Review privacy risks, lawful bases, LIA/DPIA, data sharing, and new business or technology initiatives.
• Develop and maintain privacy policies, procedures, ROPA, retention requirements, and related documentation.
• Act as Secretary to the Data Protection Committee (DPC), including preparing meeting agendas and materials, presenting key privacy matters, recording resolutions, and monitoring follow-up actions.
• Conduct PDPA training and awareness programs across the organization.
• Coordinate with the PDPC and provide privacy compliance updates and recommendations to management.

Qualifications:

• Bachelor’s degree or higher in Law, Business Administration, Information Technology, or a related field.
• 3–5 years of experience in data protection, privacy, compliance, legal, or related functions.
  Strong knowledge of Thailand’s PDPA and relevant data protection regulations.
• Experience in privacy governance, DSAR, data breach management, LIA/DPIA, and privacy documentation.
• Strong analytical, problem-solving, and stakeholder management skills.
• Good communication and presentation skills, with the ability to work effectively across business and technical teams.
• Good command of English, both written and spoken.
• PDPA/DPO or other privacy-related certification is an advantage.