Data Privacy and Compliance Officer

Job Description

Job Title: Data Privacy and Compliance Officer

Department: Governance, Risk & Compliance (GRC)

Reporting To: Senior Manager, GRC

Location: UOA Business Park

Key Responsibilities:

Data Privacy & Protection (PDPA & other applicable regulations):

• Serve as the appointed Data Protection Officer (DPO).
• Lead and coordinate data privacy compliance across jurisdictions.
• Develop, maintain, and update privacy policies and procedures.
• Monitor legal and regulatory changes related to privacy (e.g., PDPA) and advise on required controls or adjustments.
• Conduct and maintain Records of Processing Activities (ROPA) and lead Data Protection Impact Assessments (DPIAs) for high-risk data processing.
• Oversee personal data breach response processes and contractual obligation breaches.

Contractual Compliance & Legal Review:

• Review and interpret legal and contractual clauses including clients requirements (eg: SLAs, audit rights, and data security terms)
• Document and maintain a database of legal and contractual obligations.
• Assist in responding to legal and compliance audits or assessments.

Ethics, Anti-Bribery & Corruption (ABC):

• Collaborate with internal stakeholders to monitor and enhance the organization's Anti-Bribery and Corruption (ABC) compliance program.
• Assist in developing and maintaining training materials and awareness initiatives on ethics and compliance.

Third-Party Risk Management:

• Establish and operationalize a third-party due diligence framework.
• Manage third-party onboarding checks related to ethics, privacy, and compliance.
• Ensure vendors and partners comply with the organization's policies and legal obligations.

Requirements:

Qualifications:

• Diploma/Degree in Law, Legal Studies, Compliance, or related fields.
• Paralegal training or background is required.

Experience:

• Minimum 1 year of experience in compliance, legal, or data privacy roles.
• Exposure to privacy laws (e.g., PDPA) and corporate compliance is an advantage.

Skills:

• Strong understanding of data protection principles and regulatory compliance.
• Familiarity with legal and contractual clauses.
• Strong attention to detail and documentation.
• Good interpersonal and communication skills.
• Able to work independently and collaboratively across departments.

Salary: Maximum RM4000