Senior Manager, Data Privacy

PCCW Solutions; Hong Kong; On-site; HKD 1,100,000 - 1,700,000; Full time

Job summary

PCCW Solutions is seeking a Senior Manager, Data Privacy to lead the privacy governance framework across the eMPF platform. The role acts as first line of defense on privacy, data protection and governance, working with management, regulators, trustees, service providers, technology teams and internal stakeholders to ensure compliance with privacy laws and industry best practices.

The role requires designing and supervising controls, updating processes, and coordinating privacy risk assessments

Qualifications

• 8+ years of experience in data privacy, governance, risk management, compliance or related fields.
• Experience leading privacy governance programmes and interacting with regulators/auditors.

Responsibilities

• Review and update the data governance and management framework.
• Design and oversee privacy management programme controls.
• Assess adequacy of data privacy controls and recommend improvements.
• Perform privacy risk assessments and mitigations.
• Lead data privacy impact assessments on change requests.
• Collaborate with auditors and regulators to close findings.

Skills

Data privacy

Data governance

Regulatory compliance

Risk management

Leadership

Job description

Senior Manager, Data Privacy will serve as a team lead to establish, oversee, and continuously enhance the data privacy governance framework across the eMPF platform. The incumbent will provide the first-line-of-defense support on all matters relating to data privacy, data protection, and data governance.

The successful candidate will work closely with senior management, regulators, trustees, service providers, technology teams, and relevant internal stakeholders to ensure compliance with all applicable privacy laws, regulatory requirements, and industry best practices.

Your Role

• Review the data governance and management framework and update it as required
• Design, oversee and improve privacy management programme controls
• Review processes/procedures, ensure the data governance and management framework is followed, and assess adequacy of data privacy controls
• Conduct sample checking on data privacy controls to ensure they are effective
• Recommend how to strengthen data privacy controls
• Conduct review of the data privacy-related documents
• Perform data classifications based on data definitions in data dictionaries
• Review business justifications for data retention periods, and ensure data housekeeping is in place
• Conduct data privacy risk assessment and propose mitigations
• Perform privacy impact assessment on change requests and implement the required changes (e.g., whether the privacy policy and/or the personal information collection statement require changes)
• Support reporting and management of data privacy incidents, by preparing data breach incident report and drafting data breach notification form
• Incorporate lessons learned from data breach incident to enhance data privacy controls
• Collaborate with auditors to complete privacy impact assessment and privacy compliance audit, and ensure the findings and recommendations are implemented
• Assist in Privacy Commissioner’s investigation and/or inspection (if applicable), and ensure the findings/recommendations/enforcement notice are implemented.
• Review and follow up complaints/reporting of infringement of personal data privacy rights (if any)
• Keep up to date on applicable regulatory requirements, assess and implement all changes needed for fulfilling the requirements
• Support development teams to design and implement data governance tools (e.g., master data management tool for data lineage and data quality)
• Propose agenda, prepare meeting materials, conduct meetings to engage data stakeholders, and follow up action items
• Design training plan, develop training materials, and deliver training to data stakeholders, and improve data privacy training based on the feedback from data stakeholder

To Succeed in the Role

• 8+ years of relevant experience in data privacy, data governance, risk management, compliance, information security, or related disciplines.
• 2+ years in a leadership, managerial, or senior advisory capacity within financial services, pension administration or trustee, regulatory bodies, or large-scale technology-driven organizations.
• Demonstrated experience designing and implementing enterprise-wide privacy governance and compliance programmes.
• Proven track record managing interactions with regulators, auditors, and senior stakeholders.
• Experience in pension, financial services, public sector, or highly regulated environments is an advantage.
• Candidates with less experiences will be considered as Manager