Data Protection Manager

Hong Leong Bank Berhad; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Hong Leong Bank Berhad in Malaysia seeks an experienced PDPA compliance professional to support operational privacy across the bank. The role focuses on risk assessments, policy monitoring, and DPIA execution under the DPO.

You will collaborate with business units, manage data subject requests, oversee incident reporting, and deliver PDPA training to foster a privacy-centric culture.

Qualifications

• Bachelor’s Degree; professional privacy certification is a plus.
• 5+ years in banking/financial compliance, with at least 2 years handling PDPA matters.
• Strong operational knowledge of the Malaysian PDPA 2010 and experience executing risk assessments.

Responsibilities

• Provide day-to-day guidance to business units on personal data processing.
• Oversight and implement data protection policies and SOPs across operations.
• Assist the DPO in acting as a point of contact for the PDPC and data subjects.
• Facilitate and execute Data Protection Impact Assessments (DPIA) for new systems and projects.
• Identify, document, and escalates operational data privacy risks to management.
• Assess privacy risks associated with new technologies like AI.
• Assist in managing personal data breaches and compiling regulatory reports.
• Handle data subject inquiries, complaints, and access requests timely.
• Deliver PDPA training and foster a culture of privacy across the company.

Skills

PDPA knowledge

Risk assessment

Compliance monitoring

Data privacy operations

Education

Bachelor's degree

Job description

Supports the team in ensuring operational compliance with the Personal Data Protection Act 2010 (PDPA). This role focuses on executing risk assessments, compliance monitoring, and day-to-day data privacy operations across the company. This role focuses on executing risk assessments, compliance monitoring, and day-to-day data privacy operations across the company.

Responsibilities

Compliance & Operational Support

Internal Advisor: Provide day-to-day guidance to business units on personal data processing.

Policy Monitoring: Oversight and implement data protection policies and SOPs across operations.

Regulatory Support: Assist the DPO in acting as a point of contact for the PDPC and data subjects.

DPIA Execution: Facilitate and execute Data Protection Impact Assessments (DPIA) for new systems and projects.

Risk Reporting: Identify, document, and escalates operational data privacy risks to management.

Emerging Tech: Assess privacy risks associated with new technologies like AI.

Breach Support: Assist in managing personal data breaches and compiling regulatory reports.

Data Subject Requests: Handle data subject inquiries, complaints, and access requests timely.

Awareness: Deliver PDPA training and foster a culture of privacy across the company.

Qualifications / Required Skills

Bachelor’s Degree (Professional certification in privacy is a plus).

5+ years of experience in banking/financial compliance, with at least 2 years dedicated to handling PDPA matters.

Strong operational knowledge of the Malaysian PDPA 2010 and experience executing risk assessments.

Company Information

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital at the Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our "Digital at the Core" ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.

Personal Data Policy

HONG LEONG GROUP PERSONAL DATA POLICY

Hong Leong Group use personal data in accordance with the Hong Leong Group Privacy Notice (New Applicants) which can be found at http://www.hongleong.com/download/HLG_Privacy_Notice_New_Applicants.pdf

By providing to us your personal data, you hereby consent to the processing of your personal data with the said Privacy Notice.