Job Description:

• Develop, implement, and maintain data protection policies and related procedures across the bank.
• Provide advisory to other departments on issues related to data protection and PDPA compliance.
• Conduct compliance review on the operations of relevant departments regarding the collection, use or disclosure of personal data to ensure compliance with laws and regulations.
• Collaborate with other departments and provide advisory to ensure data protection is integrated into new products / new business processes
• Conduct data protection impact assessments. (DPIAs)
• Maintain records of data processing activities and ensure they are up to date.
• Support Data Protection Officer (DPO) in considering and providing opinions in respect to data sharing and exception request to access personal data.
• Support the exercise of data subjects' rights and ensure appropriate responses to data subjects requests.
• Collaborate with relevant departments in response to incidents related to personal data breaches and ensure timely reporting to data protection authorities.
• Provide guidance and training to staff on data protection principles and practices.
• Stay updated on changes to data protection laws and best practices.
• Other ad hoc tasks as assigned.

Qualifications :

• Bachelor’s degree or higher in Law, Information Security, Data Protection, Business Administration or a related field
• At least 2-5 years experiences in data protection, privacy, internal audit or a related field
• Strong knowledge and understanding of data protection principles and practices with ability to interpret and apply legal requirements into proper practices.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Ability to manage multiple tasks and work under pressure.
• Ability to handle confidential information with discretion.
• Good skills in speaking, reading, and writing in English.
• Ability to work independently and as part of a team.