PBTB | Senior Manager, Data Governance and Privacy

Prudential BSN Takaful Berhad; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Prudential BSN Takaful Berhad is seeking a senior Data Governance and Privacy lead to drive the enterprise-wide data governance and privacy program. You will define policies, standards, and SOPs, ensure regulatory compliance, and collaborate with technology, risk, and business teams.

You will operationalise the governance model, lead DPIAs, manage data incidents, and embed privacy-by-design in digital initiatives, analytics, and AI. Strong communication with executives is essential.

Qualifications

• Bachelor’s degree required in Information Management, Data Management, Information Systems, Risk Management, Law, Information Security, or related discipline.
• Certifications in data governance, privacy, or risk management (e.g., CDMP, DAMA, CIPP, CIPM, CIPT, ISO 27701, CISA, CRISC) are an advantage.
• 8–10 years of experience across data governance, data management, privacy, or regulatory compliance in regulated environments.
• Experience implementing and operating enterprise data governance and privacy frameworks.
• Strong experience conducting privacy impact assessments and managing data/privacy incidents.
• Ability to work with senior stakeholders across business, technology, risk, and compliance functions.
• Strong communication and stakeholder management skills.

Responsibilities

• Develop, implement, and maintain the Data Governance and Privacy framework across the organisation, including policies, standards, guidelines, and SOPs.
• Ensure compliance with internal policies and regulatory requirements, including data protection and privacy laws.
• Define and operationalise the data governance operating model and coordinate governance meetings.
• Drive data quality management and monitor key metrics with data owners and technology teams.
• Maintain enterprise data inventory, catalogue, and data dictionary with clear data ownership and retention rules.
• Oversee privacy compliance activities including DPIAs and advisory support to business and technology teams.
• Manage data and privacy incident response, investigation, remediation, and regulatory notification when required.
• Embed governance and privacy-by-design controls into projects and AI/analytics initiatives.
• Deliver training and guidance to promote data accountability and privacy culture.
• Prepare governance dashboards and escalate material risks to senior management.

Skills

Data governance

Data management

Privacy

Regulatory compliance

Stakeholder management

Communication

Education

Bachelor’s degree in Information Management

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

Responsible for the adoption of Data Governance Framework across all business areas in PruBSN. As part of this dynamic role, the person will report to Head of IT and work closely with senior members in the organization to deliver the requirements under the Group Data Governance programme and institutionalize data governance principles in the business.

• Develop, implement, and maintain the Data Governance and Privacy framework, including policies, standards, guidelines, and SOPs covering data ownership, stewardship, data quality, metadata management, and privacy controls.
• Ensure compliance with internal policies and applicable regulatory requirements, including data protection and privacy laws, and translate regulatory changes into operational requirements and controls.
• Define and operationalise the data governance operating model, including data ownership and stewardship, and coordinate Data Governance Council meetings and governance working groups.
• Drive data quality management by defining data quality standards, monitoring key metrics, and coordinating remediation with data owners and technology teams.
• Maintain the enterprise data inventory, data catalogue, and data dictionary, ensuring clarity on data sources, usage, ownership, classification, retention, and disposal.
• Oversee privacy compliance activities, including privacy impact assessments (DPIAs), lawful processing assessments, and advisory support to business and technology teams.
• Manage data and privacy incident response, including investigation, impact assessment, remediation, and regulatory notification where required.
• Embed data governance and privacy-by-design controls into projects, system changes, digital initiatives, and emerging technology use cases, including analytics and AI.
• Deliver training, awareness, and guidance to promote data accountability, stewardship, and a strong privacy culture across the organisation.
• Prepare governance dashboards, metrics, and reports, and elevate material risks, issues, or non-compliance to senior management and governance forums.
• Support regulatory reviews, internal and external audits by ensuring evidence readiness, traceability, and timely remediation of findings.
• Perform other duties as assigned by the line manager.

Key Requirements

• Bachelor’s degree in Information Management, Data Management, Information Systems, Risk Management, Law, Information Security, or a related discipline.
• Professional certifications in data governance, privacy, or risk management (e.g. CDMP, DAMA, CIPP, CIPM, CIPT, ISO 27701, CISA, CRISC) are an advantage.
• Minimum 8–10 years of experience across data governance, data management, privacy, or regulatory compliance roles within regulated environments.
• Proven experience implementing and operating enterprise data governance and privacy frameworks.
• Strong practical experience conducting privacy impact assessments and managing data or privacy incidents.
• Demonstrated ability to work effectively with senior stakeholders across business, technology, risk, and compliance functions.
• Strong communication, influencing, and stakeholder management skills, with the ability to present clearly to senior management.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.