Manager - Data Governance and Privacy

Hong Leong Bank Berhad; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Hong Leong Bank Berhad seeks a Manager of Data Governance and Privacy to drive PDPA/FSA/IFSA compliance and MCIPD alignment across business units. The role provides expert advisory support, conducts privacy assessments, manages data breach notifications, and oversees stakeholder relations, reporting to the Senior Manager, Data Governance and Privacy.

The ideal candidate has a Bachelor’s degree and 5 years in data governance or regulatory compliance within banking, with strong English and Bahasa

Qualifications

• Bachelor’s Degree in a relevant field.
• 5 years of experience in data governance, data privacy, or regulatory compliance in banking/financial institutions.
• Deep SME knowledge of PDPA 2010 and FSA/IFSA customer secrecy provisions.
• Strong knowledge of MCIPD and RMiT data protection standards.
• Excellent spoken and written English and Bahasa Malaysia.

Responsibilities

• Provide day-to-day authoritative regulatory guidance on PDPA and act as primary advisor on MCIPD and customer secrecy requirements under FSA/IFSA.
• Lead privacy gap assessments, DPIAs, data flow risk evaluations for emerging technologies.

Skills

Data governance

Data privacy

Regulatory compliance

PDPA knowledge

FSA/IFSA

MCIPD

DPIAs

Stakeholder management

Training delivery

Advisory writing

Education

Bachelor's Degree

Job description

The Manager, Data Governance and Privacy serves as a Subject Matter Expert driving compliance with the Personal Data Protection Act 2010 (PDPA), Financial Services Act 2013 (FSA), IFSA 2013, and Bank Negara Malaysia (BNM) standards, including MCIPD. The role delivers expert advisory support across business units, conducts privacy assessments, manages data incident notifications, and oversees stakeholder relations; the role will be reporting to Senior Manager, Data Governance and Privacy

Job Responsibilities

Advisory Support: Provide day-to-day authoritative regulatory guidance on the Personal Data Protection Act 2010 (PDPA) and act as the primary advisor on BNM’s Management of Customer Information and Permitted Disclosures (MCIPD) and customer secrecy requirements under FSA/IFSA, embedding Privacy-by-Design into new banking products, digital initiatives, and marketing campaigns.

Risk Management & Assessment: Lead and execute comprehensive end-to-end privacy gap assessments, Data Privacy Impact Assessments (DPIAs), Transfer Impact Assessments for cross-jurisdictional data flows, and risk evaluations for emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML).

Governance & Incident Management: Develop and maintain policies, privacy notices, and SOPs, while leading the incident response workflow by conducting holistic impact assessments of customer data breaches and preparing regulatory notifications (e.g., to PDPC, BNM) within mandated timelines.

Stakeholder Engagement: Collaborate with internal business and support units to integrate privacy and MCIPD controls into operational processes, and design and deliver targeted training and awareness campaigns across the organization.

Advisory & Writing Excellence: Translate complex statutory and regulatory frameworks (PDPA, MCIPD, FSA, IFSA) into clear, pragmatic advisory briefs, formal governance policies, executive updates, and statutory breach reports.

Communications, Leadership & Integrity: Exercise high ethical standards and independent judgment when managing regulatory compliance initiatives, while maintaining professional and diplomatic interactions with executive leaders, external regulators, and auditors.

Job Requirements

Bachelor’s Degree (Professional certification in privacy is a plus).

5 years of experience in data governance, data privacy, or regulatory compliance within banking or financial institutions

Demonstrate deep SME knowledge of the PDPA 2010 and FSA/IFSA customer secrecy provisions

Possess strong practical knowledge of BNM's MCIPD and RMiT data protection standards.

Demonstrate excellent spoken and written proficiency in English and Bahasa Malaysia.

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our "Digital at the Core" ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.

Hong Leong Group use personal data in accordance with the Hong Leong Group Privacy Notice (New Applicants) which can be found at http://www.hongleong.com/download/HLG_Privacy_Notice_New_Applicants.pdf

By providing to us your personal data, you hereby consent to the processing of your personal data with the said Privacy Notice.