ASSISTANT MANAGER- DATA PRIVACY & GOVERNANCE

JAYA GROCER; Malaysia; On-site; MYR 80,000 - 120,000; Full time

Job summary

JAYA GROCER is seeking an Assistant Manager for Data Privacy and Governance. This role focuses on developing, implementing, and maintaining data privacy frameworks, ensuring compliance with regulatory standards such as PDPA.

The ideal candidate will have 5–7 years of experience in Data Privacy or GRC roles, strong project management, and communication skills. Responsibilities include leading privacy assessments, managing Data Subject Requests, and collaborating on privacy management tools.

Qualifications

• 5–7 years of experience in Data Privacy or GRC roles with a proven track record.
• Strong knowledge of the Personal Data Protection Act (PDPA).
• Experience in developing frameworks and policies related to data control.

Responsibilities

• Support implementation and maintenance of data privacy frameworks.
• Conduct privacy assessments and monitor data-related risks.
• Manage end-to-end process for Data Subject Requests (DSRs).

Skills

Project management

Stakeholder collaboration

Communication skills

Education

Bachelor’s Degree in Law, Business Administration, IT or Finance

Job description

About Jaya Grocer

Jaya Grocer is an affiliate of Grab, Southeast Asia’s leading superapp. To bring the convenience of on‑demand grocery delivery to more consumers in Malaysia, we are dedicated toward building a strong team that is aligned with our goals. At Jaya Grocer, team collaboration and dedication is what we require to deliver quality products and service to our consumers and customers.

Vision

Our goal is to become the leading online‑to‑offline (O2O) retailer, leveraging our omnichannel strength to provide our customers with a rewarding, fulfilling, and exciting experience. Our goal is for customers to say “I can get what I want whenever I need it”. We aim to achieve this through offering high‑quality yet affordable goods, facilitating seamless cashless checkouts, loyalty membership via GrabRewards, and introducing our private label with “Grab Signatures”.

Mission

• Provide a diverse variety of high‑quality and fresh produce
• Offer attractive best‑value pricing
• Ensure customers have the best shopping experience
• Grow the business through successful collaboration and partnerships
• Practice the values of Jaya Grocer every single day

Values

• Teamwork
• Trust
• Integrity
• Customer satisfaction
• Growth

Role Overview

Your role as the Assistant Manager, Data Privacy and Governance focuses on supporting the development, implementation, and sustainability of the Data Privacy and Governance framework within the broader GRC program at Jaya Grocer. You will identify privacy requirements, roll out data protection plans, and monitor data‑related risks across the organization, cultivate a “Privacy by Design” culture, and provide support to functional teams to ensure data handling is compliant, secure, and efficient.

Key Responsibilities

Data Privacy & Governance

• Framework Implementation: Support the implementation and maintenance of data privacy frameworks, policies, and standards (e.g., PDPA compliance).
• Risk Assessments: Lead and conduct privacy assessments and monitor data‑related risks across the organization.
• Contracts Review: Review and interpret legal and contractual clauses for privacy compliance.
• Data Subject Rights: Manage the end‑to‑end process for Data Subject Requests (DSRs) and ensure timely resolution.
• Incident Support: Provide support and oversight for data‑related incident reporting, escalation, and gap analysis.
• Liaison & Advisory: Act as a key point of contact for internal stakeholders regarding Data Privacy and Governance inquiries.
• Tools & Automation: Collaborate on the implementation and maintenance of scalable GRC and Privacy management tools.

Monitoring & Compliance

• Compliance Reporting: Support the business in privacy compliance declarations and regular reporting to management.
• Audit & Review: Run regular self‑assessments and reviews of data processing activities and the Record of Processing Activities (ROPA).
• Training: Champion awareness programs to ensure all employees understand their responsibilities regarding data protection.

Qualifications

• Education: Minimum of a Bachelor’s Degree in Law, Business Administration, IT, or Finance.
• Experience: 5–7 years of experience in Data Privacy or GRC roles, with a proven track record of implementing data protection frameworks.
• Regulatory Knowledge: Strong knowledge of the Personal Data Protection Act (PDPA) and general governance risk management requirements.
• Technical Expertise: Experience in developing frameworks, policies, and facilitating workshops related to data control.
• Soft Skills: Strong project management, stakeholder collaboration, and communication skills.
• Attributes: A proactive, passionate, and humble individual who enjoys building programs and engaging with others.