Senior Personal Data Protection

Requirements:

• Bachelor’s degree in Law, Information Technology, Information Systems, Cybersecurity, or other relevant fields.
• Minimum 3 years of relevant professional experience in Personal Data Protection, Data Privacy, Privacy Compliance, or related areas.
• Strong working knowledge of Indonesian Personal Data Protection regulations, particularly Law No. 27 of 2022 on Personal Data Protection (UU PDP), including practical implementation in business processes.
• Hands-on experience in data mapping and/or Record of Processing Activities (RoPA), including identifying personal data, processing purposes, data flows, access, retention, and data sharing.
• Experience in conducting or supporting Data Protection Impact Assessments (DPIA) / Privacy Impact Assessments (PIA) and identifying appropriate privacy risk mitigation.
• Experience in preparing and/or reviewing privacy-related documentation, including Privacy Notices, consent mechanisms, Data Processing Agreements (DPA), data sharing provisions, and internal privacy procedures.
• Good understanding of Data Subject Rights, personal data breach management, data retention, and third-party data processing.
• Able to independently handle routine privacy compliance matters, conduct initial privacy assessments, and provide practical recommendations with minimal supervision.
• Able to work effectively with cross-functional stakeholders, particularly Legal, Compliance, Information Security, Technology, Product, HR, and Marketing.
• Good understanding of information security and data governance principles. Familiarity with ISO/IEC 27001 and/or ISO/IEC 27701 is preferred.
• Experience in financial services, fintech, digital assets, payments, technology, e-commerce, or other regulated industries is preferred.
• Professional certification in data privacy/data protection is an advantage but not mandatory.