Senior Personal Data Protection

INDODAX - Indonesia Digital Asset Exchange; Jakarta Pusat; On-site; IDR 167,400,000 - 245,520,000; Full time

Job summary

INDODAX - Indonesia Digital Asset Exchange seeks a privacy/compliance professional to lead personal data protection initiatives and support data governance across Legal, Compliance, Information Security, Technology, Product, HR, and Marketing teams.

The role emphasizes practical privacy assessments, documentation, and collaboration with cross-functional stakeholders to ensure adherence to UU PDP and related standards in a regulated fintech environment.

Qualifications

• Bachelor’s degree in Law, Information Technology, Information Systems, Cybersecurity, or other relevant fields.
• Minimum 3 years of relevant professional experience in Personal Data Protection, Data Privacy, Privacy Compliance, or related areas.
• Hands-on experience in data mapping and/or RoPA, including identifying personal data, processing purposes, data flows, access, retention, and data sharing.
• Experience in conducting or supporting DPIA/PIA and identifying privacy risk mitigation.
• Experience in preparing/privacy-related documentation (Privacy Notices, consent mechanisms, DPA, data sharing provisions).
• Good understanding of Data Subject Rights, breach management, data retention, and third-party data processing.
• Able to independently handle routine privacy compliance matters, and provide practical recommendations with minimal supervision.
• Able to work with cross-functional stakeholders (Legal, Compliance, Information Security, Technology, Product, HR, Marketing).
• Familiarity with information security and data governance; ISO/IEC 27001/27701 preferred.
• Experience in financial services/fintech/digital assets/payments/regulated industries is preferred.
• Professional privacy certifications are an advantage.

Skills

Data privacy

Regulatory knowledge

DPIA/PIA

Data mapping

Privacy notices

Data processing agreements

Data subjects rights

Breach management

Cross-functional collaboration

ISO/IEC 27001/27701 familiarity

Regulated industries experience

Privacy certifications

Education

Bachelor’s degree in Law/IT/Info Systems/Cybersecurity

Job description

• Bachelor’s degree in Law, Information Technology, Information Systems, Cybersecurity, or other relevant fields.
• Minimum 3 years of relevant professional experience in Personal Data Protection, Data Privacy, Privacy Compliance, or related areas.
• Strong working knowledge of Indonesian Personal Data Protection regulations, particularly Law No. 27 of 2022 on Personal Data Protection (UU PDP), including practical implementation in business processes.
• Hands-on experience in data mapping and/or Record of Processing Activities (RoPA), including identifying personal data, processing purposes, data flows, access, retention, and data sharing.
• Experience in conducting or supporting Data Protection Impact Assessments (DPIA) / Privacy Impact Assessments (PIA) and identifying appropriate privacy risk mitigation.
• Experience in preparing and/or reviewing privacy-related documentation, including Privacy Notices, consent mechanisms, Data Processing Agreements (DPA), data sharing provisions, and internal privacy procedures.
• Good understanding of Data Subject Rights, personal data breach management, data retention, and third-party data processing.
• Able to independently handle routine privacy compliance matters, conduct initial privacy assessments, and provide practical recommendations with minimal supervision.
• Able to work effectively with cross-functional stakeholders, particularly Legal, Compliance, Information Security, Technology, Product, HR, and Marketing.
• Good understanding of information security and data governance principles. Familiarity with ISO/IEC 27001 and/or ISO/IEC 27701 is preferred.
• Experience in financial services, fintech, digital assets, payments, technology, e-commerce, or other regulated industries is preferred.
• Professional certification in data privacy/data protection is an advantage but not mandatory.