Lead Data Protection

Full Time, onsite
YTL-Sea Digital Bank Project
Level 37, Malaysia

Salary undisclosed

Apply on

Jobstore

Original

Simplified

Are you passionate about safeguarding sensitive data and ensuring regulatory compliance? We are seeking a dynamic Data Protection Lead to join our Data, Technology & Cyber Risk function and pioneer the Data Protection program across YTL Digital Bank.

Job Description:

The Data Protection Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over data protection. In this role, you will play a pivotal role in shaping the way we handle, govern, and enhance our data assets, and comply with data protection laws and regulations.

Primary Responsibilities:

Assist with the development, review, update and/or implementation of data protection-related framework, policy, guideline and/or initiative(s) to facilitate effective risk management and governance over data risk and data protection.
Review and assess the extent of compliance with internal policies, guidelines, data protection laws and regulatory requirements.
Conduct Privacy Impact Assessments (PIAs) to ensure that Personally Identifiable Information (PII) is appropriately protected, and recommend mitigation actions to address vulnerabilities, if any.
Advise Business Units and Functional Units to embed data privacy considerations and/or control measures into the design and implementation of new products, services and processes.
Provide advisory, guidance and challenge to Business Units and Functional Units in their management of data risks to achieve their business objectives and within the organization’s risk appetite.
Investigate and report on incidents of data breaches or non-compliance, as required.
Assist with the development and/or review of incident response procedures to address data breach incidents, including notification to internal stakeholders and relevant authorities, as required.
Work with Senior Management and stakeholders to ensure that the organization has and maintains appropriate data privacy and confidentiality documentation.
Work with Senior Management and stakeholders to ensure awareness of best practices relating to data privacy and data security, fostering data risk awareness and security-conscious culture.
Coordinate with the Cyber Security and Technology teams to ensure alignment between cyber security and data privacy practices.
Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure data risk exposures.
Prepare and present data risk reports to Senior Management and relevant committees, highlighting key findings, recommendations, trends and/or non-compliance with applicable data protection regulations.
Respond to enquiries and audits (i.e. internal, external, regulatory and relevant authorities) pertaining to data protection.
Provide regulatory compliance support, guidance and advice to Business Units and Functional Units regarding regulatory changes and updates, where relevant and required.
Stay abreast of emerging technology trends, data protection laws, and regulatory developments to proactively address potential risks, and assist the Senior Management (and/or Board) understand potential concerns or risks that might impact the organization.

Qualifications:

Bachelor’s degree in law, Information Technology, Data Science or a related field.
Minimum of 12 years’ experience in any of these disciplines: data protection, information security, risk management or compliance in related areas.
Professional certification such as CDPSE, CISSP, CISA, CISM or CRISC would be advantageous.
Sound knowledge in regulatory requirements around technology risk (e.g. BNM’s Risk Management in Technology, Guidelines on Data Management and MIS Framework) and data protection laws (e.g. PDPA).
Knowledge of data management principles and concepts would be desirable.
Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.
Ability to work independently and manage multiple projects.
Detail-oriented with a strong sense of ethics and integrity.

Perks & Benefits