Job Purpose
The Data Ethics & Privacy role is responsible to mitigate data protection and privacy risks, uphold ethical standards, and foster trust by championing data privacy and ethical best practices within the Group.

Role Responsibilities:
1. Background in Law, with specialization in Data Protection Law and has experience with data protection / privacy work
2. Oversee effective management and handling of sensitive data.
3. Advise and support internal stakeholders in the conduct of data protection risk assessments to identify, evaluate, and mitigate data protection and privacy risks associated with new initiatives or projects.
4. Be subject matter expert on data protection and privacy matters and provide consultancy and advisory to internal stakeholders on these matters.
5. Develop materials and other related communications on data ethics and privacy as well as data protection including to drive business goals and to educate employees on their responsibilities, rights, and obligations regarding data privacy and security.
6. Develop, review, enhance and implement relevant framework, policies, or procedures to reflect best practices, emerging technologies and evolving regulatory environments.
7. Build and maintain strong and trusted relationships with internal stakeholders, in particular with information security, risk, compliance, legal and business teams.
8. Where required, serve as a point of contact for regulatory authorities and data protection authorities on data-related matters including responding to regulatory surveys.

Education, Experience, Certifications, Specific Skills & Competencies
1. Bachelor degree, preferably in Law or Information Management or related field
2. CIPP/CIPM or comparable privacy certifications are highly advantageous
3. Minimum 5 years of experience in data protection, compliance, ethics/governance or related function

Job Specific Skills & Competencies Required
1. Able to demonstrate competency and experience of data protection laws and best practices, and has experience in developing and implementing a data protection compliance program
2. Knowledge of data protection and related laws and regulations within the South East Asian region is a plus
3. Knowledge of designing and implementing data protection methods is a plus
4. Familiarity with IT infrastructure and cloud-based technologies is a plus
5. Prior experience in financial services, digital / fintech industry is preferred
6. Keen interest in new and emerging technologies (including cloud computing, AI, open banking, and blockchain)
7. Able to explain issues in a practical, outcome-focused manner
8. Excellent verbal, written and interpersonal skills with strong sense of collaboration and teamwork
Work well with a variety of internal stakeholders including data professionals, legal, compliance, and business teams

This position is only open to Malaysian citizens.