Location: Seksyen 13, Petaling Jaya
Role Summary
- The Operations Privacy Lead/Officer is responsible for the implementation of data privacy compliance across Malaysia. Supports local teams in meeting regulatory requirements, fosters a culture of privacy and protection, and ensures the practical application of privacy controls using the Data Risk Assurance Framework & relevant company's policies. This role's key responsibilities include operational implementation, local authority liaison (where applicable), incident response & training.
Responsibilities
Regulatory Compliance Leadership
- Ensure operational compliance with data protection laws and internal privacy policies within the assigned country, business unit, or function.
- Support the execution of the Data Risk Assurance framework using global tools, templates, and guidelines.
Governance & Reporting
- Set up and maintain local privacy governance structures including steering committees
- Collaborate with the DPO Team to ensure alignment with group policies & local privacy regulations.
- Track and report privacy compliance. Use KPIs, and other metrics through the Data Protection Assessment.
Data Risk Assurance Framework Implementation
- Build and execute an action plan using the globally provided Data Risk Assurance Framework
- Develop & maintain a processing register - using globally provided tools and processes for visibility of data processing activities within scope.
- Promote the digital certification of all digital assets to ensure Data Protection Impact Assessments (DPIAs) are triggered where required.
Data Breach Management
- Report and lead, from a data privacy prospective, the investigation and assessment of privacy incidents following the cyber incidence process.
Training & Awareness
- Provide guidance to employees on their privacy responsibilities and best practices.
- Promote a culture of data protection through awareness campaigns and training sessions
Requirement
- Min 2 years of relevant experience would be suitable
- Good understanding and hands on in data privacy would be a good