Senior Compliance Officer

REPORTS TO: Head of Legal and Corporate Compliance

Job Scope in Brief:

The position develops, oversees, implements, and continuously improves the compliance program (including data privacy) and provides compliance and data privacy support to the businesses of the company and/or its parent company and affiliates, ranging from basic to advanced complexity. This role provides a complete array of compliance and data privacy services, including drafting and monitoring policies, and advising business leaders and other company personnel.

Main Roles and Responsibilities; including but not limited to the following:

• Develop, promote, oversee, implement, monitor, update and continuously improve the corporate compliance program

• Initiate ideas, lead and take actions to promote culture of compliance, including developing and rolling out compliance awareness campaigns and activities (e.g., events, quizzes and games)

• Ensure alignment of, as well as lead, manage and handle, compliance documentation, communications, activities and initiatives (both routine and significant/complex), including special compliance projects driven by compliance function

• Design, formulate, manage, monitor and perform tasks related to compliance processes and systems, including due diligence of third parties and pre-approvals of sensitive transactions

• Manage and provide advice and resolutions for a broad range of compliance and data privacy issues with focus on moderately and highly complex matters

• Lead and conduct compliance risk assessments and identify potential issues; formulate risk management guidelines in compliance with relevant laws and regulations

• Perform research into various compliance topics, including new and existing regulations, best practices, and lead assessments on implications on the company

• Monitor and follow up on laws and regulations, regulatory changes and compliance landscape to ensure compliance and best practices; stay current on operations initiatives, compliance/regulatory concerns, and other changes in the industry

• Oversee and manage an internal legal compliance assurance process as designated in the internal procedure

• Initiate, draft, implement, monitor, review and update policies, procedures, manuals, guidelines, and tools related to compliance and data privacy

• Prepare and provide summary reports on compliance with the policies, such as Business Conduct Policy and Anti-Corruption Policy, and other compliance-related reports

• Carry out and oversee process of testing design and operating effectiveness of compliance processes

• Develop, conduct and monitor compliance training, both periodic and ad-hoc, including designing e-learning, preparing materials and conducting training

• Lead and conduct investigations, including preparing reports

• Act as the person responsible for data privacy of the company, including the following responsibilities:

  • taking the role and fulfilling the tasks and responsibilities of the Data Protection Officer as defined by the PDPA
  • ensuring and maintaining compliance with data privacy laws, including conducting data privacy assessments, identifying vulnerabilities and risks, and suggesting actionable remedies
  • maintaining Record of Processing Activities (ROPA)
  • providing guidance and advice regarding data privacy and personal data protection, reviewing relevant contract conditions, and auditing operations related to personal data
  • serving as the primary point of contact with stakeholders and regulatory authorities on data privacy
  • handling enquiries from data subjects on data privacy issues
  • providing consultation on personal data incidents
  • preparing PDPA and data privacy update reports
  • keeping up to date with developments of data protection laws and regulations

• Manage and coordinate with compliance service providers at optimal costs

• Provide guidance to junior compliance officer or other junior sources utilized in compliance activities

Qualifications and Requirements:

• Bachelor's degree or higher in Laws, Accounting, Finance or related fields
• Minimum of 7 years' PQE in compliance field at international companies or large organizations
• Strong business acumen
• Ability to think laterally and demonstrated skill and experience in providing quality, timely, practical and client-focused compliance and data privacy support on difficult issues and tasks
• Ability to interpret legislative requirements and pragmatically review and implement processes and policies
• Strong commitment to delivery of results; well-organized, detail-oriented, mature and able to multitask, prioritize and effectively analyze, manage, assess and report on a high volume of complex and diverse issues
• Highly motivated self-starter capable of working in a fast-paced team environment
• Strong interpersonal skills; ability to work independently and as part of a team with a team-player, collaborative attitude
• Adaptable, proactive, willing to learn and willing to take on varied responsibilities for development purposes
• High ethical standards and ability to maintain strict confidentiality
• Excellent written and oral communication skills, both in Thai and English
• Proficiency in Microsoft Office (Outlook, Word, Excel, PowerPoint)
• Working knowledge of and experience with FCPA an advantage
• Working experience in data privacy and experience as Data Protection Officer advantageous
• Leadership skills
• Ability to occasionally work at/travel to Rayong office is preferable