Manager, Data Privacy

Job Responsibility:

1. Support the Data Protection Officer (DPO) in developing, implementing and maintaining effective internal data privacy policies and procedures in alignment with data protection requirements.
2. Monitor regulatory development in data protection, cybersecurity and disseminate this information to the stakeholders and assess their impact on business operations.
3. Conduct privacy impact assessment and support risk mitigation strategies, including identifying key data privacy risks/weaknesses and to recommend ways to enhance procedures in order to improve operational efficiency.
4. Develop privacy compliance strategies in line with data protection and cybersecurity law and regulations to mitigate the Corporation’s exposure to privacy risk.
5. Collaborate with stakeholders in reviewing existing internal controls and processes related to data privacy to ensure that any identified gaps are being addressed.
6. Review and assess third party relationships that pose higher risk for data privacy.
7. Assist DPO in responding to data subject requests and regulatory inquiries.
8. Coordinate/conduct investigation and assessment on personal data breach incident for reporting to the relevant authorities.
9. Work closely with stakeholders to ensure appropriate technical and organizational measures for data protection.
10. Develop and implement appropriate data privacy training for employees, senior management and directors of the Corporation.
11. Assist DPO in providing guidance, attending queries on data privacy matters by providing advisory for informed decision making.
12. Support the privacy champions in each division in their execution of data privacy strategies.
13. Assist DPO in preparing data privacy reports and updates to relevant management committees and board committees.
14. Perform miscellaneous job-related duties as assigned by the Head, Compliance & Integrity from time to time.

Job Requirement:

Qualification: Candidate must possess at least a Bachelor’s Degree in Law/Banking/Finance or equivalent field.

Experience: At least 7 years of working experience in regulatory compliance. Extensive experience in handling customer data or PDPA related advisory and/or policies.

Knowledge: Knowledge in PDPA 2010 and cybersecurity related requirements is a MUST.

Skills/Competencies: Good communication and interpersonal skills. Self-starter and ability to work with minimal supervision.