Regional Data Privacy Lead

Carousell; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Carousell Group is seeking a Regional Personal Data Specialist to lead privacy and data protection initiatives across multiple markets, including Malaysia. The role requires practical legal advice to empower business goals and governance across data protection, cybersecurity, and regulatory compliance.

You will develop and maintain the Group's data protection framework, coordinate DPIAs, train teams, and support incident response while collaborating with legal, engineering and product teams in a

Qualifications

• Deep understanding of data protection laws across operating markets.
• Minimum 2 years in personal data support, DPO role, or privacy consulting.
• Privacy certifications such as CIPP/E, CIPM, CIPM.
• Experience developing and maintaining a Personal Data Management Plan.
• Strong attention to detail in a fast-paced environment.

Responsibilities

• Stay informed of laws and regulatory updates across markets.
• Provide guidance on data protection laws relevant to the Group.
• Conduct data protection risk assessments and DPIAs.
• Develop and maintain the Group's Personal Data Management Plan and policies.
• Support incident response for data breaches with investigations and actions.
• Collaborate with legal, engineering and product teams to embed privacy across the business.
• Monitor threats and communicate impacts to management and stakeholders.
• Improve processes and policies related to data protection at scale.
• Provide training and awareness on personal data protection.
• Act as data protection officer for subsidiaries when needed and liaise with regulators.

Skills

Data protection

Privacy concepts

Risk assessment

Communication

Education

Privacy certifications (CIPP/E, CIPM)

DPO or privacy-related experience

Tools

Data governance tools

Job description

Carousell Group is seeking a Regional Personal Data Specialist to lead privacy and data protection initiatives across multiple markets, including Malaysia. The role requires practical legal advice to empower business goals and governance across data protection, cybersecurity, and regulatory compliance.

You will develop and maintain the Group's data protection framework, coordinate DPIAs, train teams, and support incident response while collaborating with legal, engineering and product teams in a