Data Protection Officer / Privacy Lead

Recruit123 is partnering with our client, an established enterprise in Singapore, to hire a Data Protection Officer / Privacy Lead . In this role, you will lead the organization's privacy governance framework, ensuring full operational and regulatory compliance with the Singapore Personal Data Protection Act (PDPA) and international privacy regimes, while fostering a strong culture of data ethics and privacy-by-design across business functions. Key Responsibilities • Serve as the designated Data Protection Officer (DPO) and primary liaison for the Personal Data Protection Commission (PDPC) and external regulatory bodies. • Design, implement, and maintain the organization's Data Protection Management Programme (DPMP) and operational privacy policies. • Conduct Data Protection Impact Assessments (DPIAs) across new IT systems, AI/ML tools, marketing workflows, and vendor engagements. • Manage the end-to-end data incident response protocol, leading investigations, root cause analyses, remediation plans, and regulatory/data subject breach notifications. • Oversee Data Subject Access Requests (DSARs), consent withdrawal mechanisms, data retention schedules, and secure disposal processes. • Review and negotiate Data Processing Agreements (DPAs), cross-border data transfer mechanisms, and third-party vendor risk assessments alongside legal and procurement teams. • Spearhead internal readiness for industry certifications, including the Data Protection Trustmark (DPTM). • Develop and deliver company-wide data protection training and privacy awareness initiatives. • Advise executive leadership and product teams on emerging privacy regulations, AI governance, and regional cross-border data compliance (e.g., GDPR, APAC privacy laws). Requirements • Degree in Law, Information Security, Computer Science, Business Administration, or a related discipline. • Minimum 5 to 8 years of direct experience in data privacy, PDPA compliance, information governance, or regulatory compliance. • Deep knowledge of Singapore's Personal Data Protection Act (PDPA) and PDPC advisory guidelines; familiarity with global standards (GDPR) is advantageous. • Industry certifications strongly preferred (e.g., IAPP CIPP/A, CIPM, CIPT, or Practitioner Certificate in Personal Data Protection). • Demonstrated experience leading DPIAs, managing breach incidents, and operationalizing data governance programs. • Strong communication and stakeholder management skills, with the ability to translate legal and technical privacy requirements into practical business workflows. What's on Offer • Competitive monthly base salary ranging from SGD 7,500 to SGD 11,000, tailored to depth of privacy experience and credentials. • High-visibility leadership role reporting directly into executive management and the risk committee. • Opportunity to spearhead Data Protection Trustmark (DPTM) certification and regional data governance expansion. • Comprehensive healthcare benefits and flexible hybrid work environment. #J-18808-Ljbffr