Data Privacy Specialist, Zalo

• Develop, review, and maintain privacy policies and procedures to ensure compliance with laws, regulations, and industry standards (e.g., GDPR, Data Act).

• Embed privacy considerations into product strategies and business operations, reviewing contracts and agreements (e.g., DPAs, NDAs) to ensure privacy controls are robust.

• Proactively identify privacy risks, monitor self-assessments, and recommend improvements to the privacy roadmap aligned with evolving business needs.

• Partner with cross-functional teams to address privacy gaps, translate risks into actionable projects, and lead initiatives for senior leadership, including the CTO.

• Present data-driven arguments to support privacy strategies, manage feedback effectively, and align decisions with privacy impact assessments (PIA) and business impact assessments (BIA).

👾 What you will need

• Minimum 3 years of experience in privacy/information security/GRC role.

• In-house experience and background in cybersecurity & compliance issues.

• Strong project management and cross-functional team management skills.

• Experience leading a project or agreement from conception to completion.

• Subject-matter expertise in data privacy laws, rules, regulations, and industry standards.

• Stay up to date with the latest regulatory changes and emerging privacy threats.
  
  Nice to have:

• Working knowledge of GDPR, CCPA, ISO, PCI DSS as well as international privacy, information security and data protection laws.

• Privacy/Information Security certifications.

• Experience in policy development, risk management frameworks, and privacy governance.

• Experience in handling audits and third-party assessments.