Manager/AVP, Data Protection Office

Great Eastern Life; Kuala Lumpur; On-site; MYR 90,000 - 140,000; Full time

Job summary

A leading insurance company seeks a Manager/AVP for their Data Protection Office in Kuala Lumpur. The role involves developing data governance policies, managing data incidents, and ensuring compliance with regulatory standards like the PDPA. The ideal candidate will possess over 6 years of relevant experience in risk management or data governance, with strong interpersonal and decision-making skills.

Qualifications

• At least 6 years in Life Insurance, Banking, or similar roles in Information Security or Risk Management.
• Experience in Data Management, Process Governance, or Privacy Management.

Responsibilities

• Develop and implement policies on data governance and compliance with PDPA.
• Manage PDP-related complaints and advise on data incidents.
• Perform regular assessments to ensure compliance and mitigate risks.

Skills

Communication

Interpersonal

Supervisory

Delegation

Conflict Resolution

Decision-Making

Teamwork

Job description

Job Description - Manager/AVP, Data Protection Office (250000D5)

Job Number:

250000D5

About the Job

The person reports to the Head of Data Protection Office. Key functions include policy-making, enforcement of data protection and governance, analyzing, improving, and resolving data-related issues.

• Develop and implement policies and practices on data governance that meet obligations under PDPA.
• Regularly review the adequacy of governance, standards, and procedures related to personal data.
• Execute the approved rollout plan for Group Policy and procedures according to milestones.
• Continuously improve and review practices of company-wide data retention initiatives.
• Manage PDP-related complaints, queries, and data incidents.
• Advise and guide on handling data incidents, breaches, and reporting to regulatory bodies such as BNM.
• Monitor risks associated with personal data processing.
• Advise business users on data incidents/breaches escalation to OIRC promptly.
• Manage a team of Departmental Data Officers (DDOs) to achieve data protection objectives.
• Perform regular assessments to ensure compliance with PDPA and BNM guidelines.
• Plan, develop, and execute initiatives and projects as endorsed.
• Consider business and regulatory risks and take steps to mitigate them.
• Stay informed of industry trends, emerging threats, and technologies to safeguard the company.
• Highlight potential concerns/risks and share best practices proactively.
• Perform other related responsibilities.

Candidate Profile

We are looking for candidates with:

• At least 6 years of experience in Life Insurance, Banking, or similar roles in Information Security or Risk Management, preferably in Data Management, Process Governance, or Privacy Management.
• Key Skills: Communication, interpersonal, supervisory, delegation, PR, computer skills, conflict resolution, decision-making, teamwork.
• Key Knowledge: Personal Data Protection Act 2010, General Insurance Act, Financial Services Act, basic PC skills.
• High integrity, accountability, positive attitude towards teamwork.

Success Factors

To succeed, candidates should:

• Embody core values in daily tasks and interactions.
• Demonstrate integrity and accountability.
• Proactively drive improvements and adapt to change.
• Manage compliance risks effectively.
• Stay updated on industry trends, regulations, and emerging threats to proactively safeguard the company.

About Great Eastern

Founded in 1908, Great Eastern is a leading insurance provider in Singapore and Malaysia, with assets exceeding S$100 billion and over 16 million policyholders. It operates through various distribution channels and has a presence in Indonesia and Brunei. Recognized for its financial strength, it is a subsidiary of OCBC Bank, one of the most highly-rated banks globally.

Note: We do not accept unsolicited resumes from recruitment agencies.