Data Protection & Privacy Counsel - Global AI Governance

OSL; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

OSL is seeking a senior Data Protection Officer & Legal Counsel to hold its statutory DPO appointments and lead privacy and AI governance across the group. The role sits in Global Legal, reports to the General Counsel, and covers multiple jurisdictions including the EU/EEA, UK, Australia, Singapore, Bermuda, the US and Brazil.

The ideal candidate will have built or scaled a privacy programme end-to-end and be credible with regulators, engineering teams and senior executives.

Qualifications

• Qualified lawyer with 8–10 years PQE, of which 4+ years substantively in data protection
• Strong knowledge of GDPR and related UK GDPR/Singapore PDPA/Bermuda PIPA/Australian Privacy Act
• Proven track record building or scaling a privacy programme end-to-end (RoPA, DPIA, retention, transfer assessments, DSAR)
• Hands-on experience drafting and negotiating DPAs, SCCs, and transfer documentation
• Experience managing live data breaches through regulator notification and closure
• Comfortable holding an independent statutory seat and collaborating with Compliance, Risk, IT, and Security
• Background in digital assets/payments a plus; CIPP/E and CIPM (or FIP) preferred

Responsibilities

• Hold the designated DPO/Privacy Officer seats for in-scope entities and act as the primary contact for authorities
• Own RoPA, retention schedules, cross-border transfer registers, and applicable legal regimes
• Advise Product, Engineering, Security and Risk on privacy-by-design and lead AI governance incl. model inventory and AI Act risk classification
• Draft and negotiate DPAs, SCCs, and outsourcing terms aligning with GDPR Art. 28, MiCAR Art. 73, and DORA Art. 30(3)
• Oversee incident and breach matrices and act as legal lead on live incidents
• Supervise DSAR operations and handle complex or regulator-escalated requests
• Deliver the group’s annual privacy and AI training programme

Skills

Data privacy governance

GDPR expertise

Regulatory liaison

Compliance leadership

Education

Law degree with PQE

Tools

DPAs & SCCs drafting

Job description

OSL is seeking a senior Data Protection Officer & Legal Counsel to hold its statutory DPO appointments and lead privacy and AI governance across the group. The role sits in Global Legal, reports to the General Counsel, and covers multiple jurisdictions including the EU/EEA, UK, Australia, Singapore, Bermuda, the US and Brazil.

The ideal candidate will have built or scaled a privacy programme end-to-end and be credible with regulators, engineering teams and senior executives.