Data Protection Officer

About the role

Qualifications

• Bachelor's degree in Law, Information Technology, Information Security, Risk Management, Compliance, Business Administration, or a related discipline.

• Professional certifications in data privacy, information security, risk, or compliance are preferred, such as:

• Certified Information Privacy Professional (CIPP/A, CIPP/E or equivalent)

• Certified Information Privacy Manager (CIPM)

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Other relevant privacy, governance, risk, or compliance certifications.

Experience & Knowledge

• Strong working knowledge of the Malaysia Personal Data Protection Act 2010 (PDPA) and other applicable data protection and privacy requirements.
• Relevant experience in data privacy, compliance, risk management, legal, information security, governance, or a related field.
• Experience or knowledge in conducting Data Protection Impact Assessments (DPIAs), managing data breaches, performing privacy compliance reviews, and assessing third-party privacy risks.
• Practical understanding of privacy governance frameworks, data lifecycle management, and privacy-by-design principles.
• Experience working in a shared services, global business services, multinational, or regulated environment is an advantage.

Competencies

• Ability to maintain sufficient independence, authority, and autonomy to effectively discharge the responsibilities of the DPO role.
• Direct access to Sudong senior management to provide independent advice and escalate privacy matters where necessary.
• Ability to independently identify, assess, raise, and escalate privacy risks, compliance concerns, and recommendations.
• Strong stakeholder management, influencing, and communication skills, with the ability to engage effectively across all levels of the organisation.
• Ability to work collaboratively across Human Resources, Information Technology, Operations, Procurement, Security, Risk, Legal, and other GBS functions.
• Proficiency in both Bahasa Malaysia and English, with strong verbal and written communication skills.
• Ability to balance regulatory compliance requirements with business objectives while maintaining an independent oversight role.

Regulatory & Independence Requirements

• Meet all applicable Malaysian regulatory requirements relating to residency, accessibility, and contactability for an appointed DPO.
• Avoid holding responsibilities or decision-making authority that could create an actual, potential, or perceived conflict of interest with the independent oversight responsibilities of the DPO.
• Be empowered to provide objective advice, challenge practices where necessary, and report privacy risks directly to senior management without undue influence.

** **Your Career Growth Starts Here. Apply Now!