Assistant Manager, Data Protection Office

Key Responsibilities:

• Supporting the company's various Business Units in their operations and targets while implementing reasonable safeguards and controls based on the company's data protection framework, policies, procedures and processes.
• Ensure the company's data protection framework complies with relevant data protection laws and regulations, and ensure business units adherence to data protection policies, procedures and processes.
• Support the review, audit and reporting of data incidents, including identifying control gaps, documenting findings and recommending appropriate remedial actions.
• Conduct Data Protection Impact Assessments (DPIAs) to assist internal stakeholder to reasonably mitigate risks or gaps to achieve business goals and regulatory compliance.
• Engage various stakeholders across the company to provide real time advisory on data protection and innovation matters or enquiries.
• Conduct trainings on data protection regulations, guidelines and to review into data protection related contractual obligations (alongside the Legal team).
• Provide assistance on data access and correction requests to various business units.
• Other duties include monitoring changes to the data protection landscape, annual internal review of processes, maintaining quality assurance of documentation to ensure accountability under relevant data protection laws and regulations.

Required Qualifications:

• University degree
• CIPP/CIPM/CIPT or other relevant certification is an added advantage

Skills:

• IT security, compliance, enterprise risk, audit or related background, with experience reviewing or negotiating data clauses or agreements, would be an advantage
• Minimum 3 years of regulatory compliance experience covering personal data protection or PDPA
• Comfortable working with multiple stakeholders, to influence and drive projects
• Self-driven, motivated with business-oriented mindset to deliver solutions and results
• Good negotiation and communication skills, which is essential to foster a strong data protection culture throughout the Company and to maintain and enhance stakeholders trust.

Job Location & Schedule:

• Genting Centre
• 5 days/week in-office