(ML) Associate Director, CFCC Data Conduct, Privacy & Sovereignty (Based in Malaysia or Poland)

The Associate Director will play an essential role in the Group's Data Protection Office (GDPO)/ Data Conduct Compliance team.

The successful candidate will have the opportunity to work with stakeholders across the Group’s broad footprint and all three lines of defence, and will be joining in time to influence the Group’s approach to assessing and managing data risks as we embark on a data & privacy transformation programme.

To be successful, the candidate should have experience in interpreting and advising on privacy or other data-related laws, or on data governance good practice; be a problem-solver and self-starter; and a strong communicator and team player.

• Provide advice on the interpretation, application and implementation of laws and regulations pertaining to privacy and data protection, banking secrecy and sovereignty.
• Support both the GDPO and deputy GDPO with the implementation of the Group's privacy strategy.
• Provide expert guidance on privacy, banking secrecy and sovereignty risk assessment and management.
• Provide subject matter expertise (SME) guidance to Businesses and Functions, and colleagues in Conduct, Financial Crime & Compliance (CFCC) on privacy, secrecy and sovereignty risks and relevant mandatory obligations across the Group’s footprint.
• Monitor relevant legislative and regulatory changes and advise on associated impact to the Group’s business and operational functions.
• Actively engage in and contribute to the relevant workstreams of the Group’s Data Shield.
• Support implementation of a robust plan for managing privacy, secrecy and sovereignty risks.
• Review, assess and advise on Privacy Impact Assessments (PIAs), Records of Processing Activities and data incidents.
• Support global initiatives as requested by the GDPO.
• Help draft mandatory documentation, such as Standards and guidelines, and help maintain a library of mandatory documentation.
• Draft and maintain additional, non-mandatory documentation such as FAQs, guidelines and awareness-raising materials including content for the team’s intranet (Pulse) site.

• Qualified to degree level in relevant fields is preferred.
• A proven track record of experience in a Privacy based role preferably with a background in Compliance, Auditing, Legal and / or Risk Management.
• IAPP certification or other equivalent industry recognised qualification preferred but not essential.
• Strong interpersonal, relationship building, and influencing abilities.
• Highly entrepreneurial with a high level of energy, dedication and an unrelenting drive to deliver value, with a track record in creative and successful problem-solving.
• Ability to collaborate and work dynamically across a broad range of stakeholders.
• Ability to manage a geographically dispersed stakeholder base with multi-cultural awareness and sensitivity.
• Ability to participate within a multi-disciplinary team and be a strong team player.
• Highly disciplined and structured with an outcome orientated mindset and approach.
• Exemplary integrity, ethics, independent and resilience.
• Outstanding communication skills, both oral and written.

• CIPP certification or other equivalent industry recognised qualification.
• Legal qualification preferable but not essential.

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.