Data Protection Officer (DPO)

About the role

We are seeking an experienced and dedicated Data Protection Officer (DPO) to join BG Container Glass Public Company Limited on a full-time basis in Pathum Thani. This is a strategic and essential role within our organisation, responsible for ensuring compliance with data protection regulations and safeguarding the personal data of our employees, customers, and business partners. The DPO will play a crucial part in building and maintaining a strong data protection culture across the company, working closely with senior management and operational teams to mitigate privacy risks and ensure adherence to applicable legislation.

Key responsibilities

• Monitor and ensure compliance with data protection laws and regulations, including the Personal Data Protection Act (PDPA) and other applicable privacy legislation
• Develop, implement and maintain comprehensive data protection policies, procedures and guidelines across the organisation
• Conduct data protection impact assessments (DPIAs) and privacy risk evaluations for new projects, systems and business initiatives
• Manage data subject requests, including access requests, rectification, erasure and portability rights, ensuring timely and compliant responses
• Provide data protection training and awareness programmes to employees at all levels to foster a privacy-conscious culture
• Investigate data protection incidents and breaches, coordinating remedial actions and managing regulatory notifications where required
• Act as the primary point of contact and liaison with regulatory authorities, data protection supervisors and external stakeholders on data protection matters
• Audit and review data processing activities, vendor contracts and third-party arrangements to ensure appropriate safeguards are in place
• Maintain comprehensive documentation of processing activities, consent records and compliance measures
• Advise senior management and operational teams on data protection obligations, risks and best practices

What we're looking for

• Professional qualification or certification in data protection or privacy law, such as Certified Data Protection Officer (CDPO) or equivalent qualification
• Minimum of 5 years' experience working in a data protection, privacy or compliance role, preferably within an in-house legal or compliance function
• Thorough knowledge of data protection legislation, including the Personal Data Protection Act (PDPA), GDPR principles and other regional privacy frameworks
• Strong understanding of data governance, information security and risk management principles
• Excellent knowledge of data protection best practices, privacy by design and privacy impact assessments
• Proven ability to communicate complex data protection concepts clearly to both technical and non-technical stakeholders
• Strong organisational skills with the ability to manage multiple priorities and competing demands
• Excellent attention to detail, analytical mindset and ability to work independently whilst collaborating with cross-functional teams
• Demonstrated experience in conducting investigations, managing incidents and resolving data protection complaints
• Proficiency in English and Thai languages, both written and verbal
• Experience within the manufacturing or glass container industry would be advantageous