Regional Data Privacy & Compliance Lead

Carousell Group; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Mentorship and Growth

Impactful Work

Collaborative Culture

Job summary

Carousell Group is seeking a Regional Personal Data Specialist to safeguard data privacy across multiple markets in Southeast Asia. You will guide the business on Personal Data Protection Act compliance, lead risk assessments, and help implement robust privacy programs.

The role collaborates with legal, engineering, and product teams under the General Counsel. Ideal candidates have 3+ years in privacy roles, hold certifications (CIPP/E/A, CIPM), and can manage data protection projects at scale.

Qualifications

• 3+ years of experience in personal data support, a DPO role, privacy consulting, or a similar operational setting.
• Experience developing Personal Data Management Plans and privacy policies.
• Strong knowledge of Personal Data Protection Act and region-specific regulations.
• Ability to assess privacy risk and communicate impacts to senior stakeholders.

Responsibilities

• Stay informed of applicable data protection laws and regulatory updates across markets.
• Provide expert guidance on data protection laws and regulations relevant to the Group.
• Conduct data protection impact assessments and risk assessments to mitigate privacy risks.
• Develop, implement, and maintain the Group’s Personal Data Management Plan and privacy policies.
• Support incident response for data breaches and security incidents, including investigations.

Skills

Privacy expertise

Regulatory compliance

Stakeholder management

Leadership

Education

Bachelor's degree or relevant field

Tools

CIPP/E

CIPP/A

CIPM

Job description

Carousell Group is seeking a Regional Personal Data Specialist to safeguard data privacy across multiple markets in Southeast Asia. You will guide the business on Personal Data Protection Act compliance, lead risk assessments, and help implement robust privacy programs.

The role collaborates with legal, engineering, and product teams under the General Counsel. Ideal candidates have 3+ years in privacy roles, hold certifications (CIPP/E/A, CIPM), and can manage data protection projects at scale.