Woodlands Hospital Hiring! Full Time Senior Assistant Manager, Data Protection Office in - Ricebowl

About

Woodlands Health is an integrated healthcare campus designed to shape the future of care delivery in Singapore. Bringing together acute and community care, specialist outpatient services and innovative care models, we provide person-centred, seamless and connected healthcare that extends beyond hospital walls.

As part of the National Healthcare Group (NHG), we are committed to improving population health through innovation, collaboration and continuous transformation. Our people play a critical role in reimagining healthcare delivery, improving patient outcomes and building a healthier future for the communities we serve.

Why This Role Matters

Data is at the heart of modern healthcare. As healthcare becomes increasingly digital, safeguarding personal and sensitive information is essential to maintaining patient trust, ensuring regulatory compliance and enabling secure, effective care delivery.

As part of the Data Protection Office, you will play a key role in strengthening Woodlands Health's data protection and governance framework. Working closely with stakeholders across the organisation, NHG, MOH, PDPC, Synapxe and external partners, you will support the implementation of policies, controls and programmes that ensure compliance with data protection requirements while fostering a strong culture of accountability and information stewardship.

This role offers the opportunity to contribute to organisation-wide initiatives across data governance, compliance management, risk assessment, incident management, data security and emerging technologies, including Artificial Intelligence (AI).

What You Will Drive

1. Data Protection Governance & Compliance

• Support the implementation and continuous improvement of Woodlands Health's Data Protection Programme.
• Conduct data protection compliance reviews, audits and assessments across departments.
• Monitor compliance with the Personal Data Protection Act (PDPA), Ministry of Health (MOH) requirements, NHG policies and institutional standards.
• Support the development, review and implementation of data protection policies, procedures, frameworks and governance practices.
• Provide advisory support to departments on data protection obligations and compliance requirements.

2. Risk Management & Impact Assessments

• Support Data Protection Impact Assessments (DPIAs), privacy reviews and risk assessments for new systems, projects and initiatives.
• Identify, assess and mitigate data protection risks arising from operational, technology and business changes.
• Conduct vendor and third-party data protection assessments and due diligence reviews.
• Review contractual data protection requirements and support oversight of data intermediary compliance.
• Maintain risk registers and support reporting on key data protection risks and mitigation measures.

3. Data Security & Information Protection

• Support the implementation and monitoring of data security controls and governance measures.
• Coordinate Data Security Maintenance Programme (DSMP) activities and reporting requirements.
• Support Data Loss Prevention (DLP) governance, monitoring and investigations.
• Partner with Information Technology, Synapxe, cybersecurity and governance stakeholders on data protection and information security matters.
• Drive initiatives that enhance the secure handling, sharing and management of personal data across the organisation.

4. Incident Management & Regulatory Reporting

• Coordinate the management of data protection incidents, breaches and near-miss events.
• Support investigations, root cause analyses and corrective action plans.
• Monitor incident trends and identify opportunities to strengthen organisational controls.
• Support incident escalation and reporting requirements to NHG, MOH, PDPC and other relevant stakeholders when required.
• Contribute to post-incident reviews and continuous improvement initiatives.

5. Data Protection Awareness, Training & Culture

• Develop and coordinate staff awareness and engagement programmes that strengthen data protection culture.
• Conduct onboarding, refresher training and capability-building initiatives for staff, Data Protection Leads and key stakeholders.
• Support organisation-wide campaigns and communication efforts relating to privacy, data governance and information security.
• Promote awareness of evolving data protection requirements, emerging risks and best practices.
• Foster individual and organisational accountability for the responsible use of data.

6. Emerging Technologies & AI Governance

• Support privacy and data protection reviews for Artificial Intelligence (AI) and emerging technology initiatives.
• Assess compliance, security and operational risks associated with new technologies and digital innovations.
• Work with project teams to ensure appropriate governance and controls are embedded during implementation.
• Support the development of policies and guidance relating to responsible AI and data use.

7. Governance, Reporting & Continuous Improvement

• Prepare management reports, dashboards, presentations and committee papers.
• Maintain personal data inventories, data flow maps, records and governance documentation.
• Support institutional audit, accreditation, licensing and assurance activities relating to data protection and information management.
• Participate in NHG, MOH and institutional workgroups, committees and projects.
• Drive quality improvement initiatives that strengthen data protection governance and organisational maturity.

8. Stakeholder Management & Collaboration

• Build strong partnerships with departments across the organisation to support data protection compliance and risk management.
• Collaborate with NHG, MOH, PDPC, Synapxe and external stakeholders on governance initiatives and requirements.
• Support institutional projects that require data governance, privacy and compliance input.
• Foster a culture of collaboration, transparency and continuous learning across stakeholders.

What You Bring

Experience & Qualifications

• Degree in Information Systems, Cybersecurity, Law, Business, Healthcare Administration, Risk Management or a related discipline.
• Experience in data protection, privacy, governance, compliance, risk management, information security or a related field.
• Familiarity with the Personal Data Protection Act (PDPA) and data protection practices within regulated environments.
• Experience conducting compliance reviews, audits, risk assessments or governance activities would be advantageous.
• Experience within healthcare, public healthcare, public sector or highly regulated industries would be beneficial.
• Exposure to data governance, information security, vendor management or AI governance initiatives would be an advantage.

Professional Skills & Attributes

• Strong understanding of privacy, data protection and governance principles.
• Excellent analytical, investigative and problem-solving skills.
• Strong organisational and project management capabilities.
• Ability to balance compliance requirements with operational needs.
• Strong stakeholder management and interpersonal skills.
• Excellent written and verbal communication skills.
• Ability to analyse and present information clearly to diverse audiences.
• Meticulous, proactive and solutions-oriented approach.
• High level of integrity and professionalism when handling sensitive and confidential information.
• Ability to manage multiple priorities in a dynamic healthcare environment.

Why Join Us?

1. Play a meaningful role in safeguarding patient information and strengthening trust across healthcare services.
2. Contribute to organisation-wide governance, compliance and digital transformation initiatives.
3. Gain exposure to data protection, information governance, cybersecurity and emerging technologies, including AI.
4. Collaborate with multidisciplinary teams and key healthcare stakeholders across the NHG ecosystem.
5. Be part of a future-focused healthcare organisation committed to innovation, responsible data use and continuous improvement.