Head of Privacy

We are now ONE! #CelcomDigi

Celcom and Digi have merged with the aim to create Malaysia’s most inspiring telco-tech company, building on two well-loved brands with over six decades of combined strengths in innovation and connecting Malaysians.

The Head of Privacy / Data Protection Officer leads privacy and data protection governance, strategy, and execution, and constantly strives to both ensure compliance and inspire privacy as a responsible business culture at CelcomDigi. The Head of Privacy / Data Protection Officer also serves as trusted advisor to leaders and senior management in CelcomDigi and is tasked with independent oversight of privacy compliance.

Your Responsibilities:

• Develop and oversee the implementation of privacy and data protection policies, procedures, guidelines to ensure compliance with national legislation and legal obligations, and drive ongoing improvement in data handling practices.
• Serve as a senior expert and trusted advisor on all data privacy-related matters and provide proactive guidance to demonstrate compliance and manage data privacy risk.
• Responsible for coordinating privacy risk management, compliance activity and privacy risk reporting.
• Drive data privacy leadership, and provide strategic advice to CelcomDigi Management Team, Governance and Risk Committee (GRC) and Board of Directors on current and emerging privacy requirements.
• Collaborate with a cross functional team of peers, including Cybersecurity, Innovation, HR, Procurement, Audit, Compliance, Enterprise Risk Management, Sustainability and other internal stakeholders to ensure privacy functions are uplifted and embedded across the organization.
• Act as a liaison and engage with national regulators (Malaysian Data Privacy Commission) and international privacy and data protection associations such as International Association of Privacy Professional (IAPP), GSMA, and other external industry to coordinate CelcomDigi’s position on data privacy issues.
• Formulate content and strategy for privacy training and capacity building programs to enhance awareness of all employees understanding of CelcomDigi’s privacy policy, data handling practices, and legal obligations is maintained across organization.

Your Merits:

• A degree from a reputable university in Law or Information Management, with IAPP certifications (CIPP/A, CIPM or similar), with at relevant experience in developing and managing both legal and operational aspects of compliance programs for large customer-facing organisations.
• Detail-focused approach needed to recommend and implement strategic improvements on a range of privacy and data protection issues.
• Excellent communicator, with good stakeholder management and presentation skills, with a deep interest in regional, national, and global privacy and data protection law and emerging trends.
• Ability to provide clear, comprehensive, and pragmatic advice, and support with a high degree of professionalism.
• High standards of integrity, a commitment to personal excellence, strong judgment, and intellectual curiosity that takes your understanding, work product and client relationships to the next level.
• Demonstrated growth mindset and the ability to thrive in a dynamic, fast-paced workplace.