Data Protection Officer

Responsibilities

• Spearhead and oversee the Data Protection Impact Assessment across all business units, ensuring risks are proactively identified, assessed, and mitigated before project deployment.
• Develop, implement, and continuously strengthen data protection policies & procedures, and frameworks across the Group and its subsidiaries.
• Maintain comprehensive record of personal data processing activities and ensure proper documentation in accordance with the PDPA’s 7 principles.
• Conduct regular privacy audits and risk assessment to evaluate the effectiveness of data protection controls and recommend improvement strategies.
• Advise Senior Management, the Boards, and key stakeholders on PDPA’s compliance, emerging regulatory trends, risk assessment & exposure, and improvement strategies.
• Oversee cross border data transfers, third (3rd) party processing arrangements, and contractual compliance with data protection obligations.
• Collaborate with internal stakeholders such as Group Legal, Group Human Resource, Group IT, Quality Assurance and Group Internal Audit to ensure consistent application of privacy standards in accordance to the PDPA.
• Serve as the key person to liaise with data protection and regulatory bodies, external auditors, to ensure timely and accurate communication on behalf of the Group and its subsidiaries.
• Oversee and coordinate responses to data subject requests such as access, correction, and deletion within the statutory timeframes.
• Lead the Group’s data breach governance and escalation protocol, including investigation, notification, remedies, and post-incident reviews.
• Maintain detailed incident logs, risk registers, and compliance reports to support internal governance and regulatory audits.

Qualifications

#J-18808-Ljbffr