Senior Executive, Governance & Stakeholder Management

Job Summary

This role is to assist in developing, implementing and maintaining the MCMC's Data Sharing Policy, Data Classification Framework and overall data governance standards, ensuring compliance with internal governance requirements and national regulatory mandates. The position aims to strengthen data integrity, security and responsible data usage across the MCMC.

Job Responsibilities

1. Serve as MCMC's Data Protection Officer (DPO) to ensure Personal Data Protection Act 2010-aligned governance, oversee privacy compliance advisory, coordinate breach/incident governance where applicable, translate statutory/assurance positions into implementable controls, and escalate interpretation issues where necessary.
2. Assist in developing, maintaining and implementing the organisation-wide Data Governance to ensure accurate identification, classification and protection of data.
3. Support the enforcement and continuous improvement of the Data Governance, ensuring consistent approval workflows, security controls and compliance requirements.
4. Perform compliance monitoring related to data handling, data access, and data transfer across departments to ensure adherence to approved policies, standards and control requirements.
5. Conduct data governance risk assessments (confidentiality, integrity, availability, unauthorized access and data leakage) to identify gaps and recommend risk treatment actions.
6. Maintain governance documentation and records (policies, SOPs, standards, data dictionaries, stewardship records, registers) to ensure traceability, audit readiness and consistent implementation.
7. Consolidate cross-division inputs, stakeholder requests and issues into coordinated responses and guidance to deliver coherent and consistent internal/external communications.
8. Assist in governance awareness, training and change enablement activities to promote a strong data governance culture and staff compliance.
9. Support centralized oversight and alignment with relevant Acts, directives and guidelines (e.g., Personal Data Protection Act 2010, Data Sharing Act 2025, Official Secrets Act 1972, Malaysian Communications & Multimedia Commission Act 1998 and Cyber Security Act 2024) to ensure governance practices remain legally and regulatorily aligned.
10. Coordinate stakeholder management and administrative support for Commission Members and Advisors (scheduling, accommodation, logistics, travel, meeting packs, on-ground coordination) to ensure seamless engagements and professional service delivery.
11. Monitor budget utilisation and resource allocation for assigned programmes and stakeholder management activities and undertake ad-hoc tasks including research/benchrnarking as assigned to support timely delivery and informed decision making.
12. Undertake any ad-hoc or cross-function tasks assigned by the Head of Division/Department in relation to the scope of the division/department in a timely manner to ensure the tasks are delivered accordingly.

Qualification & Work Experience

1. Minimum CGPA of 3.00 Bachelor's Degree/Masters in Information Management, Governance, Risk & Compliance, Law, Cybersecurity, or equivalent. and/or
2. Professional Qualifications in Certified Data Protection Officer, Certified DAMA- DMBOK (Data Management Body of Knowledge), Lead Auditor in ISO standard for data governance or Certified Information Privacy Manager (CIPM)
3. Minimum 5 years of relevant work experience.
4. Experience risk in data governance, data management, compliance, information security, audit, management, or policy/process governance.
5. Proven experience in policy development and implementation, including operating procedures, standards, and governance controls.
6. Experience managing high-stake stakeholders (senior management, regulators, inter-agency, industry).
7. Exposure to regulated/statutory environments, including familiarity with Personal Data Protection 1972, Act 2010, Data Sharing Act 2025, Official Secrets Act Malaysian Communications & Multimedia Commission Act 1998, Cyber Security Act 2024, and secrecy/confidentiality obligations.

Technical Competencies/Skills

1. Strong analytical and critical thinking skills
2. Understanding of data lifecycle, metadata, classification, and security controls
3. Good interpersonal and communication skills
4. Ability to manage multiple tasks and work with cross-functional teams
5. High ethics, integrity, and adherence to confidentiality
6. Detail-oriented with structured documentation skills

Behavioural Competencies/Skills

1. Analytical mind with problem-solving aptitude
2. Attention to details
3. Strong communication and collaborative skills
4. Confidence Customer Focus
5. Time management with sense of urgency
6. Achievement Oriented
7. Self-management
8. Proactive

Candidate must be willing to work in Cyberjaya