Senior Privacy & Compliance Leader (DPO, Indonesia)

Sun Life; Cilandak Timur; On-site; IDR 500,000,000 - 900,000,000; Full time

Job summary

Sun Life Indonesia seeks a seasoned Privacy and Compliance leader to design and govern the privacy program, ensuring alignment with UU PDP, OJK, and international standards. You will partner with senior leaders to embed privacy by design across products and processes.

You will lead a team, manage risk assessments, advise on regulatory changes, and coordinate DPIAs. The role demands deep experience in financial services privacy, strong stakeholder management and fluency in Bahasa Indonesia and

Qualifications

• Bachelor’s degree required; postgraduate degree preferred.
• Privacy certifications like CIPM, CIPP/A, CDPSE desirable.
• 8–10 years in data privacy, compliance, or information security; 3–5 years in leadership.

Responsibilities

• Lead privacy program aligned with UU PDP, OJK, and ISO 27701.
• Define governance, policies and standards for the organization.
• Oversee privacy risk assessments; report to senior leadership and Board.
• Act as DPO or support the designated DPO to meet regulatory obligations.
• Monitor Indonesian privacy legislation; advise on product/privacy implications.
• Conduct PIAs/DPAs for high-risk processing.
• Manage third-party privacy due diligence and cross-border transfers.
• Lead privacy training; build culture and report metrics to executives.
• Lead and mentor privacy/compliance team; manage budget.

Skills

Data privacy

Regulatory compliance

Stakeholder management

English proficiency

Bahasa Indonesia

Education

Bachelor’s degree

Postgraduate degree in Law/IT

Job description

Sun Life Indonesia seeks a seasoned Privacy and Compliance leader to design and govern the privacy program, ensuring alignment with UU PDP, OJK, and international standards. You will partner with senior leaders to embed privacy by design across products and processes.

You will lead a team, manage risk assessments, advise on regulatory changes, and coordinate DPIAs. The role demands deep experience in financial services privacy, strong stakeholder management and fluency in Bahasa Indonesia and