Senior PDP Officer

INDODAX - Indonesia Digital Asset Exchange; Jakarta Pusat; On-site; IDR 18,000,000 - 30,000,000; Full time

Job summary

INDODAX - Indonesia Digital Asset Exchange seeks a seasoned privacy compliance professional to strengthen data protection programs across the enterprise. You will map personal data, assess processing activities, and implement privacy by design in collaboration with Legal, IT, Product, HR, and Marketing.

The role requires 3+ years of experience in Personal Data Protection, familiarity with UU PDP No. 27 of 2022, and hands-on DPIA/PIA expertise.

Qualifications

• Bachelor’s degree in Law, Information Technology, Information Systems, Cybersecurity, or other relevant fields.
• Minimum 3 years of relevant professional experience in Personal Data Protection, Data Privacy, Privacy Compliance, or related areas.
• Strong working knowledge of Indonesian Personal Data Protection regulations, particularly Law No. 27 of 2022 on Personal Data Protection (UU PDP), including practical implementation in business processes.
• Hands-on experience in data mapping and/or Record of Processing Activities (RoPA), including identifying personal data, processing purposes, data flows, access, retention, and data sharing.
• Experience in conducting or supporting Data Protection Impact Assessments (DPIA) / Privacy Impact Assessments (PIA) and identifying appropriate privacy risk mitigation.
• Experience in preparing and/or reviewing privacy-related documentation, including Privacy Notices, consent mechanisms, Data Processing Agreements (DPA), data sharing provisions, and internal privacy procedures.
• Good understanding of Data Subject Rights, personal data breach management, data retention, and third-party data processing.
• Able to independently handle routine privacy compliance matters, conduct initial privacy assessments, and provide practical recommendations with minimal supervision.
• Able to work effectively with cross-functional stakeholders, particularly Legal, Compliance, Information Security, Technology, Product, HR, and Marketing.
• Good understanding of information security and data governance principles. Familiarity with ISO/IEC 27001 and/or ISO/IEC 27701 is preferred.
• Experience in financial services, fintech, digital assets, payments, technology, e-commerce, or other regulated industries is preferred.
• Professional certification in data privacy/data protection is an advantage but not mandatory.

Skills

Privacy regulations

DPIA/PIA

RoPA

Data mapping

Cross-functional collaboration

ISO 27001/27701 familiarity

Regulated industries

Education

Bachelor’s degree in Law, IT, IS, Cybersecurity or related fields

Job description

• Bachelor’s degree in Law, Information Technology, Information Systems, Cybersecurity, or other relevant fields.
• Minimum 3 years of relevant professional experience in Personal Data Protection, Data Privacy, Privacy Compliance, or related areas.
• Strong working knowledge of Indonesian Personal Data Protection regulations, particularly Law No. 27 of 2022 on Personal Data Protection (UU PDP), including practical implementation in business processes.
• Hands-on experience in data mapping and/or Record of Processing Activities (RoPA), including identifying personal data, processing purposes, data flows, access, retention, and data sharing.
• Experience in conducting or supporting Data Protection Impact Assessments (DPIA) / Privacy Impact Assessments (PIA) and identifying appropriate privacy risk mitigation.
• Experience in preparing and/or reviewing privacy-related documentation, including Privacy Notices, consent mechanisms, Data Processing Agreements (DPA), data sharing provisions, and internal privacy procedures.
• Good understanding of Data Subject Rights, personal data breach management, data retention, and third-party data processing.
• Able to independently handle routine privacy compliance matters, conduct initial privacy assessments, and provide practical recommendations with minimal supervision.
• Able to work effectively with cross-functional stakeholders, particularly Legal, Compliance, Information Security, Technology, Product, HR, and Marketing.
• Good understanding of information security and data governance principles. Familiarity with ISO/IEC 27001 and/or ISO/IEC 27701 is preferred.
• Experience in financial services, fintech, digital assets, payments, technology, e-commerce, or other regulated industries is preferred.
• Professional certification in data privacy/data protection is an advantage but not mandatory.