Responsibilities:

• Conduct activities according to the recommendations provided by the DPO committee, monitor the status of activities, and report on the status of DPO operations.

• Collaborate with business units, within the scope of the DPO's appointed duties, to guide personal data protection.

• Compile and establish processes related to the PDPA (Personal Data Protection Act) to ensure compliance with the law, and operate by those processes.

• Do the risk assessment and prepare the reports regarding the personal data.

• Conduct training and raise awareness among employees on the topic of PDPA and personal data protection/security.

• Support the creation and updating of data protection and data governance policies.

• Support the response to data leak incidents and data breaches.

Job Qualifications:

• Bachelor’s or Master’s Degree in Technology, Risk Management, Law, or related fields.

• Technical and Legal expertise on data protection

• Have significant hands-on privacy experience and expert knowledge of data protection law and practice to implement PDPA mandates

• Ability to understand all personal data processes and processing operations, IT systems, and security needs within the organization

• Ability to communicate complex privacy-related concepts and requirements in simple terms, including being able to translate regulator recommendations into internal guidelines and other documentation

• Experience in technology risk management and IT compliance is an advantage

• Experience in deep technology about data analytics, data engineering, data modeling, machine learning, AI, and cloud is an advantage