Privacy Officer, Asia

Finance, Procurement, Legal, Privacy, Property; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Benefits offered by this job

Paid annual leave

Global travel perks

Company events

Career growth opportunities

Job summary

FCM Asia is seeking an experienced Privacy Officer to lead day-to-day privacy management across our Asia portfolio, including FCM and Discova. You’ll report to the Asia Chief Privacy Officer and own DPIAs, incident investigations and ongoing compliance across multiple jurisdictions.

You’ll engage clients and internal teams, train staff, and monitor regional regulatory developments. The role requires strong communication, a regional privacy mindset, and fluency in English; CIPP/A is preferred.

Qualifications

• Bachelor's degree or higher in business, law, IT or related field.
• 3+ years' experience in privacy, data protection, or compliance.
• Proven ownership of incident investigations or DPIAs.
• Strong knowledge of regional privacy regimes, incl. PDPA.
• Experience presenting to external clients and senior stakeholders.
• Familiarity with privacy by design and data minimisation.
• Understanding of international data transfer mechanisms (EU SCCs, BCR).
• GRC methodologies knowledge; ability to influence without direct control.
• CIPP/A certification or equivalent preferred.

Responsibilities

• Lead privacy program development, consent framework, retention practices, and policies across Asia.
• Conduct compliance assessments and maintain regional privacy register.
• Monitor regulatory developments and escalate strategic matters to Asia CPO.
• Present to corporate clients and support Commercial teams on privacy questions.
• Collaborate with tech teams to address privacy in systems and applications.
• Support bid responses related to data protection matters.
• Manage data subject access, corrections, and rights requests per laws.
• Conduct vendor privacy assessments and due diligence.
• Review client contracts for privacy requirements with third parties.
• Lead privacy incident investigations and DPIAs end-to-end.
• Design and deliver privacy awareness campaigns and training.
• Drive privacy culture and provide regional privacy status reporting.

Skills

Privacy

Data protection

Privacy law

Risk management

Auditing

Compliance

Stakeholder communication

Education

Bachelor's degree or higher in business administration, law, IT or related discipline

Job description

Privacy Officer, Asia | Champion Privacy, Build Trust.

Love navigating complex regulations and love building trust across organizations? Are you a detail-oriented privacy professional ready to join a fast-moving growth company transforming the way the world's businesses travel?

At FCM, we combine cutting-edge technology with a people-centric mindset to transform our clients' travel programmes. Globally & locally connected, fun & energetic, flexible, and a little unconventional; that's our FCM way!

About the Opportunity

As Asia Privacy Officer, you'll lead the day-to-day delivery of our privacy management program across Flight Centre Travel Group's portfolio of brands (including FCM, Discova, and other FCTG entities) operating in Asia. Reporting to the Asia Chief Privacy Officer, you'll take ownership of operational and investigative work, from leading privacy incident investigations and Data Protection Impact Assessments (DPIAs) to day-to-day compliance activities across this complex, multi-jurisdictional environment.

We are looking for a dynamic professional with solid knowledge of regional privacy and data protection regimes who is ready to be the region's voice on privacy matters, delivering training internally and engaging confidently with clients. This is a highly visible role requiring strong communication skills and the ability to influence stakeholders across all levels of the organisation.

What You Will Do

• Support the development, implementation and maintenance of FCTG's data privacy program, consent framework, retention practices, and policies across the region
• Conduct regular compliance assessments and maintain the regional privacy register, tracking data processing activities and compliance status
• Monitor regulatory developments across Asia, providing preliminary assessments and escalating strategic matters to the Asia CPO
• Present to corporate clients to address privacy concerns and support Commercial teams in responding to customer privacy questions
• Work closely with technology and development teams to anticipate and address privacy issues in systems and applications
• Support bid-writing teams in RFP responses related to data protection matters
• Manage data subject access, correction, and individual rights requests in accordance with applicable privacy laws
• Conduct vendor privacy assessments and support due diligence processes
• Review data privacy requirements within client contracts and ensure third-party supplier contracts meet FCTG privacy requirements
• Lead end-to-end privacy incident investigations, documentation, and regulatory notifications where required
• Lead DPIAs for new and existing products, systems, and business initiatives across the region
• Design and deliver privacy awareness campaigns, training and orientation for employees across all Group brands
• Drive culture change and promote privacy awareness across all levels of management
• Support regular reporting on privacy compliance status, incidents and training for regional and Group review

Who We're Looking For

• Bachelor's degree or higher in business administration, law, IT or related discipline (or equivalent experience)
• 3+ years' experience in privacy, data protection, privacy law, risk management, auditing and/or compliance
• Demonstrated ownership of incident investigations, impact assessments or similar deliverables
• Working knowledge of regional privacy regimes with strong understanding of Singapore PDPA and DPO obligations
• Experience presenting to external clients and senior stakeholders
• Familiarity with privacy by design principles and data minimisation
• Familiarity with international data transfer mechanisms (EU model clauses, Binding Corporate Rules)
• Experience or familiarity with governance, risk and compliance (GRC) methodologies
• Ability to influence without direct control, with excellent written and spoken English
• Confident communicator who builds trust and sustains collaborative relationships
• Strong analytical skills with ability to break down complex information and make rational judgments
• Ability to work independently, take initiative and drive matters to closure
• CIPP/A certification or equivalent preferred
• Prior experience as or supporting a Data Protection Officer under Singapore PDPA preferred
• Familiarity with cloud computing, online services and data analytics preferred
• Experience with ISO 27001, ISO 27701, NIST and/or PCI DSS preferred
• Prior experience in Retail, Corporate Travel Management Services, or tech companies is a plus

Our FCM Difference

We are fiercely proud of our company culture. Our employees are difference makers and here, you will find:

• We are an inclusive bunch and encourage you to come as you are. Enjoy the freedom to be brilliantly yourself
• Work life Balance: We believe in “No Leave = No Life” so have your own travel adventures with paid annual leave and access travel industry perks
• Celebrate wins at legendary Buzz Nights and our top performers attend our mind blowing annual Global Gathering event
• Brightness of Future - Advance your career locally or globally

At FCM, we're unconventional, always flexible, and globally connected. Come as you are, dream outrageously big, and help us transform the world of business travel.